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programs that Micro- 
soft Corp. announced 
last week will moti- 
vate many enterprise 
customers to re-evalu- 
ate their existing agreements, 
part of the plan 


could mean cost increases for 


since new 


SOFTWARE 
PRICING 


for fixed periods of 


time, starting Oct. 1. 

Enterprise 
ments will be open to 
more companies than 
are now, since the number 
of PCs a company needs in or- 
der to qualify will be reduced 


agree- 


they 


from 500 to 250. 
they 
revenue, 


some firms, analysts predicted. 


Saying it wants to offer cus- “I can see need to in- 
since [operat- 
have flat- 


Licensing, page 73 


tomers more choices, Micro- 


soft took initial steps toward li- 


crease 


ing system] sales 


censing software as a service, 


Microsoft's Volume Licensing Programs 


Open Agreement: No change 


Select Agreement: 250-license minimum, 
three-year term 

Enterprise Agreement: 250-license minimum, 
three-year term for standard set of Microsoft prod- 
ucts on all PCs 

Enterprise Agreement Subscription: This new 
option allows customers with enterprise agreements to 
tent software for a fixed time period in the same way they 
currently lease computer hardware. The cost is about 
15% less per year than a new enterprise agreement. 


Open Agreement: 
Five-license mini- 
mum, two-year term 


Select Agreement: 
250-license mini- 
mum (approximate), 
two-year term 


Enterprise Agree- 
ment: 500-license 
minimum, three-year 
term 
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pany’s four or five highest-paid corporate officers. Kim S. Nash examined the 
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How do they know they’ve made 
it big? When they influence the CEO, get 
eye-popping bonuses and show up in the 
annual proxy statement as one of the com- 


Fortune 1,000’s proxies and found that only 46 of their CIOs hit the jackpot. 


The special report, with a top-2. 


USERS MOLD SECURITY BENCHMARK 


Group develops 
standard for Solaris 


BY PATRICK THIBODEAU 

The problem with IT security 
benchmarks is that the refer- 
ence point is a constantly shift- 
ing target as new technologies 
and threats emerge. 

And that’s an especially dif- 
ficult problem to overcome, 
said security 
tems managers. They are ex- 
amining the fruits of a relative- 
ly new cooperative effort that 


corporate sys- 


| this week will yield the near- 


final version of a systems secu- 
rity benchmark for Sun Micro- 
systems Inc.’s Solaris. 

But 
the benchmark’s continued use- 


despite concern about 


fulness, 
the Center for Internet Securi- 
ty said the organization's tech- 
nical benchmark for securing 
Solaris systems will be key to 
their security 
“To me, 
nomic package for us,” 
Patton, who heads security for 
the Americas at Houston-based 
Shell Services International 
Inc., the IT unit of Royal Dutch 


efforts. 
this is a great eco- 
said Iris 


end-user members of 


5 compensation chart, begins on page 42. 


Shell Group. In return f 


$5,000 membership fee 
company paid to the CIS, it 
ceiving technical inform 
that’s good enough to ser 
substitute for higt 

ltants, she said 


su 


Coop- 
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The CIS is a nonprofit 
erative group in Bethesda, Md., 
that was formed last 
i 


includ 


October 
Its members e more t 


140 


agencies and consulting firms 


companies, governm 
The benchmark outlines a 
list of specific operational 
actions and settings for 
securing systems at 
different levels of 
protection. It 
Solaris, page 16, 
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6 Global One announces a pri- 
vate network that uses IP on top 
of high-speed MultiProtocol Label 
Switching routing. 


7 The Windows XP operating 
system will ship in October, says 
Microsoft. 


BIT outsourcing at auto manufac- 
turers shields major projects from 
the budget ax. 


10 Leading Fibre Channel switch 
manufacturers agree to a standard 
code that will allow rival products 
to work together. 


12 IBM releases an enhanced 
version of its DB2 database, 
promising better application 
integration. 


20 The U.S. Postal Service plans 
to upgrade its letter-recognition 
technology. 


THE TOP 


CERTIFICATIONS 


Having the right technical cer- 


tifications on your résumé can 


be the key to better jobs, proj- 


ects and pay. The right one for 


you may depend on where you 


are in your career and which 


ones you already have. But 


here’s a look at some top certi- 
fications with which you defi- 


nitely won't go wrong. PAGE 63 
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31 Web car sellers team up to of- 


fer build-to-order vehicles online. 


31 Web traffic tools help market- 
driven companies figure out who’s 
visiting their sites and what they’re 
buying. 


34 Workstyles: Find out what it’s 
like to work in IT at Philadelphia- 
based Peco Energy. 


36 Wireless e-commerce appli- 
cations are put to the test during a 
roundtable discussion co-spon- 
sored by Computerworld. 


41 Dual degrees that combine 
IT skills and business know-how 
ire gaining steam on college 
campuses. 


42 CIO salaries show that a large 
percentage of Fortune 1,000 firms 
still don’t recognize IT as a core 
function. 





TECHNOLOGY 47 


48 Hack of the Month: A conflict 


between American and Chinese 
hackers threatens U.S. businesses. 


52 Security Journal: Security 
manager Vince Tuesday analyzes 
attacks on his network. 


54 Exec Tech: Explore alterna- 
tives to passwords, including a 
thumbprint-reading mouse and 
a wireless proximity sensor. 


56 Root-cause analysis and 
event correlation software gets 
a skeptical reception from IT 
managers. 


61 QuickStudy: Cascading Style 
Sheets allow authors to attach fo 
natting information such as fonis, 
colors, positicning and spacing to 
HTML documents. 


62 Emerging Companies: ICon- 


verse’s wireless application devel- 


STREAMING INTO 
THE ENTERPRISE 


Companies that are delivering 
video and audio streaming con 
tent over the Web or internal 
networks say the process is valu 
able, if you understand the tech- 


nology’s limitations. PAGE 58 


Patricia Keefe describes sev- 
eral ways that Computerworld is 
working to better serve IT leaders. 


Pimm Fox explains why over- 
hauling the 1996 Telecommunica- 
tions Reform Act could be bad for 
IT managers 


Dan Drake writes that it’s up 
to software buyers to revive inno- 


vation on the PC platform 


Thornton May says IT should 
help human resources departments 
reshape corporate cultures. 


Theresa House observes that 


TT must make a better effort 


ecruit Minorities tnt 


Frank Hayes says Microsoft’s 
new licensing model is eliminating 
the option of refusing to upgrade 
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opment software boasts a drag- How to Contact CW 72 


(° AUK MOREONLINE For breaking news, updated twice daily at noon and and-drop interface to cut develop- Company Index 72 
a 5 p.m., visit our Web site. www.computerworld.com/latestnews ment time. Shark Tank 74 


PALM 05 OR GADGET ENVY HOW 10 GET 
WINDOWS CE? tic THE GO-AHEAD 


friend, Gadget Guy was 
Which PDA standard will integrate suddenly overcome After reading the ROI supplement 
best into your IT infrastructure? with gadget envy — that comes with this issue, head to 
Larry Mittag, CTO at mobile sys- his friend’s cell our ROI Web site for online-only 
tems integrator Stellcom, walks phone was better features such as “Getting the 
through the differences between than his. Find out Green Light,” which details how 
the Palm OS and Windows CE, and what he did about it. to use business payback scenarios 
hosts a forum on mobile devices in www.computerworld. to secure approval and money for 
the enterprise. www.computerworld. com/wireless new e-business projects. 
com/community/os www.computerworld.com/roi 


WHO EARNS WHAT? 


You'll find an expanded chart 
of CIO salaries to accompany 
our “Major-League CIO” special 
report.www.computerworld.com/ 
ciosalaries 





Report: Mobile | 
Commerce Bombs 


Less than 1% of mobile phone sub- 
scribers used their cell phones to 
make a purchase in the past year, 
according to a report by Chicago- 
based consulting firm A.T. Kearney 
Inc. The report added that only 3% 
of U.S. mobile phone users plan to 
execute a mobile commerce trans- 
action in the next year, down from 
the 34% who said in last year's 
survey that they intended to make 
such purchases. The report cited 
slow data rates, small screens and 
awkward keyboards. 


Sara Lee Strikes 
E-Commerce Deal 


Sara Lee Corp. in Chicago last week 
announced plans to outsource 80% 
of its European purchasing activity 
during the next 18 months to Jen- 
kintown, Pa.-based ICG Commerce 
Inc. The e-commerce deal covers a 
total of $800 million in purchases 
and focuses on indirect items such 
as office equipment, cargo trans- 
portation and telecommunications. 


Nortel to Exit DSL, 
Searches for CEO 


Nortel Networks Corp. said Friday 
that it’s looking for a successor to 
replace its CEO, who will retire next 
year, and that effective immediate- 
ly, its chief operating officer has 
quit for health reasons. Brampton, 
Ontario-based Nortel also an- 
nounced that it will exit the Digital 
Subscriber Line business to concen- 
trate on higher-growth markets. 


Compaq Backs Off 


Two weeks after announcing that it 
would acquire Proxicom Inc. for 
$266 million, Compaq Computer 
Corp. on Friday said it won't match 
a higher offer made by a competing 
bidder for the Reston, Va.-based 
e-business consulting firm. The high- 
er bidder was South Africa-based Di- 
mension Data Holdings PLC. 
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Rival Routing Protocol 
Takes on Frame Relay 


Global One says superior QOS and cost 
savings will drive migration to MPLS 


BY JAMES COPE 


RAME RELAY may 
the 


widely accepted ways 


be one of most 
of linking geographi- 
cally dispersed cor 
porate locations, but Multipro- 
tocol Label Switching (MPLS) 

no-nonsense, high-speed 
routing protocol may be a 


technology whose time has 
come, thanks to better quality 
of service (QOS) and lower im 
plementation costs. 

Paris-based Global One is 
one major proponent of MPLS 
for worldwide wide-area net 
work connections. Last week, 
the telecommunications ser- 
vice provider announced that 
it had flipped the switch on a 
new data center in Reston, Va., 
that provides a virtual private 
network (VPN) over MPLS 
service 

Andi Wethli, CIO at manu 
Hold- 


ings AG in Frauenfeld, Switzer- 


facturer Sia Abrasives 


said his company has 
Global MPLS 
VPN service to connect sites in 


land 
One’s 


chosen 


10 countries. 


What Is It? 


MPLS is a specification from 
the International Engineering 
Task Force that enables routers 
at the edge of networks to read 
special tags on IP packets. That 
bypasses destination lookup in 
net- 


routers at the core of a 


work, which, according to 
industry officials, helps speed 
routing and also affords QOS 
that can support a 


wide variety of network traffic, 


at levels 


including video. 

Wethli’s selection criteria in- 
cluded global access to the car- 
rier’s network, VPN services 
and a single network that could 
handle voice and data. He said 
his company is running enter- 


prise resource planning appli 
cations, some legacy produc 
tion systems, corporate e-mail 
and voice telephone traffic 
over the network. 

According to at least one an 
alyst, QOS in MPLS networks 
is superior to that of frame re- 
lay. Jim Slaby, an analyst at 
Cambridge, Mass.-based Giga 
Information Group Inc., said 
he expects to see a “wave of de- 
ployment” of MPLS-based net- 


works during the next two to 


three years. Slaby said that’s 
because MPLS is cheaper for 
service providers to set up, 
manage and maintain than 
frame relay and therefore costs 
companies 10% less to install 
and run than frame services. 
WorldCom Inc. is also moving 
toward providing MPLS ser- 
vice, Slaby added. 

Global One’s main service 
offering is still frame relay, not 
ed Executive Vice 
Detlef Spang. Still, he said, he 


expects more of Global One's 


President 


existing corporate customers 
to migrate to MPLS VPNs. 
Global One, which is owned 


by France Telecom ADS in 


Cisco to Support Next IP 


IPv6 designed to 
far exceed IPv4’s 
4 billion addresses 


BY JAMES COPE 

Addressing the prospect that 
the world may run out of pub- 
Cisco 


lic Internet addresses, 


Systems Inc. told Computer 
world last week that the next 
iteration of its Internetworking 
Operating System (IOS), due 
this month, will support IP 
Version 6 

IPv6, based on a 128-bit ad- 
dress structure, has been un- 
der development the 
mid-1990s by a group within 
the Internet Engineering Task 
Force. It’s designed to break 


since 


through the 4 billion-address 
ceiling of the 32-bit IPv4. 

Using IPv6, the number of 
public Internet addresses is, 
for all practical purposes, infi- 
nite, according to Steve Deer- 
ing, Cisco’s engineering vice 
president. 

John Crain, technical direc- 
tor at the Internet Corporation 
for Assigned Names and Num- 
bers (ICANN) in Marina Del 


Rey, Calif., said there’s no im- 
mediate danger of depleting 
the current pool of IPv4 ad- 
dresses. He added that ICANN, 
which oversees the naming au- 
thorities responsible for hand- 
ing out IP addresses, has 100 
unallocated blocks on hand, 
each with 16,777,216 individual 
addresses 

Still, 
wireless. The third generation 


there’s a wild card: 
of mobile phones, sometimes 
referred to as 3G, works best 
when each phone has its own 
public IP address. And it’s not 


Heavyweight 
Protocols 


How many more Internet 
addresses can IPv6 handle? 


>If each IPv4 address 
weighed 1 gram, the weight 


. of the total number ofad- 
dresses would equal one-half — 


of the Empire State Building. 


Aseeeeeneneneeeneesrerenencnpansennsnceenecnnepenennsenen | 


~ »If each IPv6 address 


weighed | gram, together 
they would be 56 times the 
weight of Earth. 


Seer | 


COMPUTERWORLD May 14, 2001 


- os 
= 


SIA ABRASIVES ClO ANDI WETH- 
LI chose Global One’s MPLS ser- 
vice because its VPN could handle 
voice and data. 


Paris, is in the process of merg- 
Amsterdam-based 
Equant NV. 
Spang said the merger should 
be completed by July. 

France Telecom will retain a 
54% share in the new entity, 
Spang said. The name of the 


ing with 
service provider 


new company has yet to be de- 
termined. D 


a stretch to imagine sales of a 
few billion phones and other 
wireless devices that could use 
up existing IPv4 addresses. 

Most large corporate users 
aren't concerned, though. 

Officials at Ameritrade Hold- 
ing Corp. in Omaha, for exam- 
ple, said that the online broker- 
age company is monitoring de- 
velopments in IPv6 but that 
the company has no plans to 
begin a formal evaluation of 
the new protocol set. 

Scott Marcus, chief technol- 
ogy officer at Genuity Inc. in 
Woburn, Mass., said some re- 
cent studies he has been in- 
volved with indicate there will 
be plenty of IPv4 addresses at 
least through 2010. 

Stan Schatt, an analyst at 
Giga Information Group Inc. in 
Cambridge, Mass., said that 
although IPv4 and IPv6 aren't 
directly interoperable, they 
can coexist on the Internet. 
Software upgrades to existing 
routers, Schatt explained, can 
give them the ability to rec- 
ognize both 
tocols. 

IPv6 traffic can’t run native 
over the IPv4 Internet and vice 
versa, Deering said. But IPv6 
packets can traverse the exist- 
ing Internet by tunneling 
through IPv4.D 


and route pro- 
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Microsoft: Don't Stop Windows 2000 Rollouts to Wait for XP 


Analyst likens new XP features to 
Service Pack release for Windows 2000 


BY CAROL SLIWA 
Microsoft Corp. last week an- 
nounced plans to release its 
promised Windows XP desk- 
top operating system to users 
in October. But companies 
now rolling out Windows 2000 
shouldn’t worry about doing 
an immediate upgrade to XP, 
Microsoft officials said. 

Jim Allchin, group vice pres- 
for operating 


ident system 


platforms at the software ven- 


Omnidky Ups 


Usage-based pricing 
could affect sales 


BY BOB BREWIN 

Saying users of Compaq Com- 
puter Corp.’s iPaq Pocket PC 
use more airtime, wireless ser- 
vices provider OmniSky Corp. 
is charging iPaq users $20 per 
month more than it charges 
users of other handheld devices. 

IPaq users will have to pay 
the premium for unlimited air- 
time on the nationwide cellu- 
lar packet data network oper- 
ated by Francisco-based 
OmniSky beta 
showed that they logged on 
more often and spent more 
time online than 
Hewlett-Packard Co.’s Jornada 
Pocket PC, Palm Inc.’s Palm V 
or handhelds from Handspring 
Inc., said Amanda Higgins, an 
OmniSky spokeswoman. She 
declined to detail the amount 
of airtime used by iPaq users. 

OmniSky will charge Com- 
paq users $59.95 per month for 
airtime, compared with $39.95 
per month 
Palm V, Handspring handhelds 
and the Jornada. 

OmniSky, which introduced 
its service for the iPaq last 
week, determined in its beta 
test “that iPaq users use a lot 


San 


because tests 


for users of the 


users of 


dor, said during a teleconfer- 
ence that he wouldn’t suggest 
tabling Windows 2000 desktop 
projects in order to wait for the 
shipment of Windows XP, 
which will be released as dif- 
ferent versions for business 
ind home users. 

Companies could move to 
XP later, if they’re “in the mid- 
dle of a [Windows 2000 instal- 
lation] when Windows XP is 


launched,” Allchin said. “But if 


The Newest 
Windows 


What: Official release 


XP. the 


When: 


Should you upgrade? If y 


Ine OF gM 
ws 95 18. 


they’ve already rolled out Win- 
dows 2000, I think they’ve got 
a great system there.” 

Analyst Mike Silver at Gart- 
Stamford, Conn., 


ner Inc. in 


ates for Compag iPag Users 


more airtime than Palm or Jor- 
nada users ... and we have to 
set our pricing policy around 
airtime used,” Higgins said. 
Alan Reiter, an analyst at 
Wireless Internet & Mobile 
Computing in Chevy Chase, 
Md., said the disparity in pric- 
ing for wireless service es- 
tablished by OmniSky could 
influence corporate purchas- 
ing decisions. 
“This is an unnecessary 
discrimination of iPaq users,” 


Reiter said. “Corporate IT 
managers could get irritated at 
having to pay a higher price for 
the same kind of service,” de- 
which handheld 
device was purchased, he said. 


Nora Hahn, a spokeswoman 


pending on 


for Compaq, said iPaq users 
for $39.95 to 
iPaq Net 
which is equivalent to the ser- 
vice offered by OmniSky. IPaq 
Net is supplied by GoAmerica 
Communications Inc. in Hack- 


can subscribe 


Compaq’s service, 


said companies that don’t plan 
to install the desktop version 
of Windows 2000 until 
year might want to go directly 
to Windows XP instead 

“If they’re in the midst of 


next 


planning to bring in new ma- 
later this with 
2000, 
Silver said. “If they 
haven’t started planning [by] 
the third or fourth quarter of 


chines 


Windows 


year 


we say, ‘Go 


ahead, ” 


this year, then they have to 
consider whether they should 
wait for XP.” 

Many corporate users usual- 


ly bypass the initial version of 


a new Windows release and 


ensack, N.J., Hahn said. She 
added that since OmniSky is a 
separate company, Compaq 
has nothing to do with its pric- 
ing decisions. 

Higgins said OmniSky is 
running an introductory offer 
through June 30 that bundles 
the hardware — an iPaq and a 
modem — along with a year’s 
worth of airtime for $699. “You 
get the 


for free,” she said. D 


ne 


essentially hardware 


> inform 


ty on our Web s 


www.computerworld.com/wireless 


Microsoft 
Pack 


wait for 


update, 


iresses any bugs or 


wit J 
[added] to Windows 2000 
Planned Windows XP 

tures geared toward tf 

es include a n 

plications desi f 
versions of Windows r 
XP, and a tool that lets wirele 


users gain autom 


other networks. D 


More Window, 
viore W V 


p m . 
# OmniSky pians to charge Com- 
pag iPag Pocket PC users a $20 
airtime premium because 
says, iPaq users soak up more air- 
time than HP or Palm users. 
= Palm and HP users pay 


$39.95 per month, vs. $59.95 

for iPaq users on OmniSky 

= Compag offers a similar but low- 
er-priced service through its iPaq 
Net provided by GoAmerica 


IBM Brings Software Under Single E-Business Umbrella 


BY JAIKUMAR VIJAYAN 
IBM launching an 
e-business initiative aimed at 
helping users dynamically con- 
nect multiple enterprise appli- 
cations and systems using a 
standards-based Web services 
architecture, said sources fa- 
miliar with the announcement. 

The effort is said to encom- 
pass all four of IBM’s major 
software technologies below 
the operating system level: its 
WebSphere application server 
and DB2 database, plus sub- 
sidiary Tivoli Systems Inc.’s 
management tools and the 
groupware and collaboration 
products made by IBM’s Lotus 


today is 


Development Corp. unit. 

As part of the initiative, the 
sources said, IBM will develop 
and compo- 
nents that are supposed to let 
the different technologies in- 
teract with one another more 
efficiently. IBM declined to 
comment the announce- 
ment, which is taking place to- 
day at an event in New York. 

“It sounds like IBM is build- 
ing components that link appli- 
cations together dynamically,” 
said Sam Albert, president of 
Sam Albert Associates Inc. in 
Scarsdale, N.Y. “This is an ap- 
preciation by IBM of how [in- 
teroperable] e-business soft- | 


tools software 


on 


ware portfolios need to be.” 
Among the products expect- 
ed to be announced are Web- 
Sphere Studio tools for Web 
services application develop- 
ment and a WebSphere Busi- 
ness Integrator, which will pro- 
vide integration, transaction 
and workflow services between 
applications and enterprises. 
The products are scheduled 
to start shipping later this 
quarter and will incorporate 
support for standards like Sim- 
ple Object Access Protocol; 
Universal Description, Discov- 
ery and Integration; and Web 
Services Description Language. 
Also being announced is a 


Web 
ment kit for building Web ser- 


will become 


Lotus services enable 


vices. The tools 
available in the second half of 
this year and will include a Lo- 
tus knowledge-discovery man- 
agement module. 

Meanwhile, a DB2 XML Ex- 
tender will bring Web services 
to IBM’s 
software technology. The tech- 


relational database 
nology has already been inte- 
grated into IBM’s recently an- 
nounced DB2 
will enable Web services to ac- 
cess data, regardless of vendor 
platform. 

IBM declined to comment 
on today’s announcement. P 


Version 7.2; it 





NEWS 


Outsourcing Helps Auto 
Sector in Jough Times 


Lean IT staffs, flexible contracts help 
manufacturers forge ahead with less 


BY LEE COPELAND GLADWIN 
N IN technolo 
professionals haven't 
to the 
nation 
putting 
yects at 
es from 
last 
heavily out 


their 


ek said 
ations have beet 

model al 

itly evaluate 

said Ted Woz 

e president of 
materials management 
ra, Ontario-based Mag 
,an $1] bil 


component manu 


a International Inc 
yn vehicle 


If IT staff cuts become nec- 


essary, “it will come from peo 
ple outside rather than inside,” 
Wozniak said at the Michigan 
IT Summit here. 

Ford Motor Co. and General 
also rely on 


Motors Corp 


heavily outsourced IT opera 
tions. Both companies estimat 
ed spending about $3.2 billion 
last year on IT but said they 


that 


plan to slightly reduce 


sum this year. 

‘It will be a long time before 
we spend that much again,” 
Scott, GM’s chief 


said Tony 


Layoff-Proof 


Major automakers say out- 
sourcing has immunized their 
IT departments from cuts. 


Delphi Automotive Sys- 
tems, for example, has an 
IT staff of about 600, 
but CIO Peter Janak says 
the $29 billion manufactur- 
er uses an outsourced 
staff of about 4,800. 


“GM _ has 


been reducing spending on IT 


technology officer 
over the last couple years,” pr 
marily through cost controls, 
not head-count reductions 

But that hasn’t stopped the 
world’s largest automaker from 
piloting a wireless laptop LAN 
project and a wireless con- 
struction village at the build 

§ > of its Lansing Grand 
River manufacturing plant in 
x, Mich. 


Scott said these types of am 


Lansir 


bitious projects are needed to 


help GM become more effi 
cient at its sprawling facilities. 

Peter Janak, CIO at Delphi 
Automotive Systems Corp., said 
using outsourced resources al 
lows the $29 billion maker of 
auto parts to keep internal staff 
numbers level and forge ahead 
with critical IT projects. 

“The growth opportunities 

] 


[in IT] are zero at this point,” 
said Janak 


Supplier Exchange Planned 
Mich. 


based company is developing a 


Even so, the Troy, 


supplier exchange to lower the 


cost of communicating pro- 


duction changes throughout 


the supply chain. Linked to 


Users Take B2B Projects 
One Small Step at a Time 


I2 users set targets 
in online supply 
chain operations 


BY MICHAEL MEEHAN 


A down economy may have 
slowed the corporate charge 
toward a Web-based business- 
to-business trading world, but 
companies continue to invest 
in targeted online supply 
chain operations. 

Speaking last week at an 
i2 Technologies Inc. customer 
show here, LeRoy Allen, an 
e-commerce vice president at 
apparel maker VF Corp., said 
his firm had slowed its efforts 
to link with other companies 
because it decided to prepare its 
own one-to-one back-end sys- 
tems for an e-commerce boom. 

“Sharing incorrect informa- 
tion or bad information with 


our customers and suppliers 


just didn’t seem like a good 
idea,” Allen said. 
In February, 


N.C.-based VF’s jeanswear di- 


Greensboro, 


vision, which includes brands 

Wrangler 

went 
reorganized 
that 
gives real-time pro- 
information 
concerning its 52,000 


such as 
and 
with a 
supply 


Lee, live 


chain 
duction 


jeans stock-keeping 
units (SKU), 103,000 
bills of materials and 
980,000 and 
forecasts. 


orders 


Most important in 
terms of e-commerce, 
Dallas-based i2 supplied a con- 
duit through which a customer 
using a Web-based procure- 
ment engine, such as Buyer 
from Mountain View, Calif.- 
based Ariba Inc., can query 
VF's jeanswear division to get 
real-time information about 
inventory and capacity. 

Allen said that linking all 


GUY MANUEL: New 
Web storefront is 
step toward full 
collaboration. 


SAP 


source planning and electronic 


Delphi's enterprise re 


data interchange systems, the 


portal would communicate 


real-time manufacturing up 


dates to suppliers in all parts of 


the supply chain 

Only four of Delphi's 5,000 
suppliers are participating in 
the 6-month-old pilot, which 
about $200,000 to 


thus far to 


has cost 
$300,000 create. 
Janak said he plans to either 
bring in additional outsourced 
staff to take the project into 
production or hand it over to a 
LLC 
to build out. Southfield, Mich.- 
based Covisint is an automo 


vendor such as Covisint 


tive exchange launched by the 


500,000 of VF's SKUs, 75 distri- 
bution centers and 100 manu- 
facturing centers into the sys 
will take 


stressed the importance of a 


tem years, but he 
steady march forward. 

“You can’t do it all in one 
day,” he said. 

In fact, business-to-business 
office supplier Corporate Ex- 
press Inc., a subsidiary of Ams- 
Buhrmann NV, 
take two 
years to construct a 


terdam-based 
plans to 
new online _ store- 
front to replace the 
in-house model it 
built in 1996. 

Guy Manuel, the 
company’s North 
American vice presi- 
dent 
said the 
front will 
Broomfield, 
based Corporate Ex- 
press to do more of the ana- 
lytical work 
e-commerce. 

He said that using trend 
analysis, adapting to changing 
procurement needs, imple- 
menting business and 
providing real-time control 
over expenditures were pipe 
dreams when Corporate Ex- 


for e-business, 
new store- 
enable 
Colo.- 


necessary for 


rules 
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The growth 
opportunities 
lin IT] are 
Zero at 
this point. 


PETER JANAK, CIO, 
DELPHI AUTOMOTIVE SYSTEMS 


Big Three automakers last year. 

The portal project, which 
will million 
and $10 million to get into full 
production, could potentially 
reduce costs by $100 million 
eliminating the 
time delays, overtime and pre- 


cost between $5 


per year by 
mium freight shipment costs 
with missed 
duction schedules, Janak said. B 


associated pro- 


press first built the storefront 
for its customers 

“We've delivered online in- 
ventory and billing, but we 
have to create a way to share 
with 
customers, and this storefront 
is the first step,” Manuel said. 

Overall, he said, Corporate 
Express plans to spend more 
than $88.5 million on business- 


more information our 


to-business technology. 

“We're probably a couple of 
years away from full collabora- 
tion, but we're installing the 
technology that should allow 
us to link with multiple compa- 
nies when that time arrives,” 
Manuel said. 

Kip Martin, an analyst at 
Stamford, Conn.-based Meta 
Group Inc., said business-to- 
business projects with defini- 
tive returns on investment are 
the only way to proceed. 

“No knows what the 
whole B2B solution is,” he said. 
“It seems people are waking up 
to that and starting to figure 
out what they can do until that 
time arrives.” D 


MOREONLINE 


For the latest news and forums on e-com- 
merce, visit Our e-commerce community 
www.computerworld.com/ecommerce 
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IRS Goof-offs 

Senate Finance Committee Chair- 
man Chuck Grassley (R-lowa) last 
week criticized Internal Revenue 
Service workers for goofing off at 
work. The evidence comes from two 
reports by the Tax Administration 
inspector general that found that in 
a seven-day period, slightly more 
than half of IRS employee Internet 
time was spent on personal use, in- 
cluding stock trading, sports activi- 
ties, gambling and viewing sexually 
explicit content. Moreover, almost 


half of all incoming e-mails were for 
nonbusiness purposes. 


ae EC 2 Pat BE DIE 


HP to Sell VeriFone 


Hewlett-Packard Co. signed an 
agreement last week to sell its Veri- 
Fone Inc. electronic payment divi- 
sion to merger and acquisition spe- 
cialist Gores Technology Group. Los 
Angeles-based Gores, which will ac- 
quire the struggling HP division for 
an undisclosed sum, said it doesn’t 
expect any employees to be laid off 
as a result. HP said it incurred a 
loss of $40 million in its fourth 
quarter last year as a result of its 
purchase of Santa Clara, Calif.- 
based VeriFone. Company officials 
acknowledged then that “VeriFone 
had been a problem” but said the 
bad times appear to have passed. 
HP discussed using VeriFone tech- 
nology to turn handheld computers 
and mobile phones into devices that 
can be used for shopping. 


Nortel Eyes Ethernet 
Over Optical Fiber 


Nortel Networks Corp. in Brampton, 
Ontario, last week announced its 
strategy to use 10 Gigabit Ethernet 
over optical fiber to simplify net- 
work management and speed traffic 
between the enterprise and long- 
haul optical connection points. Nor- 
tel’s technology is based in part on 
a new 10 Gigabit Ethernet interface 
for its 8600 Switch Router. The 
technology is intended to ease con- 
gestion and simplify complex sys- 
tems in connecting enterprise net- 
works to long-haul optical networks 
in metropolitan areas. 


NEWS 


Switch Vendors Agree 
On Interoperability 


Standard code lets McData, Brocade 
devices communicate in SANs 


BY LUCAS MEARIAN 
HE TWO LEADING 
manufacturers of 
Fibre Channel 
switch products 
announced last 

week that they have agreed on 

a standard code that will allow 

their rival products to commu- 

nicate in storage-area net- 
works (SAN) 

Analysts say the move will 
make it easier for IT managers 
to tie together their legacy Fi- 
bre Channel networks to cre- 
ate larger and more easily con- 
trolled storage envi- 
ronments. 

McData Corp. an- 
nounced that it joint- 
ly developed the in- 
teroperability code 
with EMC Corp. and 
that it has installed 
the code in its director-class 
switch, the ED-5000, allowing 
it to communicate with net- 
work devices made by Brocade 
Communications Systems Inc. 

San Brocade 
commands 60% to 90% of the 


Jose-based 


Fibre Channel switch market- 
place, according to Cambridge, 
Mass.-based Giga Information 
Group Inc 

All ED-5000 switches ship- 
ping from Broomfield, Colo.- 
based McData will contain the 
new code. 

he initiative will benefit IT 
managers such as Edward J. Pe- 
ters, supervisor of main server 
support for the city of Calgary, 
Alberta. Peters plans to expand 
a SAN that was built exclusive- 
ly through Brocade 2800 
switches, which carry far fewer 
connectivity ports per device 
than the director-class switch 
McData offers. The city’s SAN 
stores 1OTB of data on 20 Unix 
and Windows NT servers. “It 
gives us some choices now,” he 


said. “We're growing quickly 


MOREONLIN 


For the latest s 


1 researc 


enter at www.computer 
world.com/storagecenter 


and want to move into a direc- 
tor-class switch this year.” 

Like a router on the Internet, 
a switch directs data traffic 
over a SAN, which is a subnet 
work dedicated to storage. 

A director is a high- 
end switch that, unlike a 
switch with eight or 16 
ports, has up to 64 ports 
and is completely redun- 
dant for increased relia- 
bility. 

McData EMC’s 
code has been accepted as a 
standard by the Fibre Channel 
Standards Working 
Group of the Internet 
Task 
Xe Force. Brocade is part 
goto of the 
and helped develop 
the standard 

James Opfer, an an 


and new 


Engineering 


organization 


alyst at Gartner Inc.’s San Jose 
based Dataquest Inc. unit, said 
the 
raises the bar for challenges to 


“switch interoperability 


fibre channel's incumbency by 
emerging network 
technologies whose own inter- 
operability is yet unproven.” 
“The big deal here is that 
Brocade and McData are work- 
ing together, if not on a busi- 
ness level, on a technical one. 


storage 


| That has 


historically been a challenge,” 
said Bob Zimmerman, an ana- 
lyst at Giga. 

McData said the interoper- 
ability feature, dubbed E-Port, 
ties together Brocade’s 16- and 
eight-port Silkworm switches, 
McData’s ED-5000 enterprise 
director and EMC’s 
trix ED-1032 enterprise direc- 
tor and Connectrix DS-16B and 
DS-8B switches. EMC will also 
begin shipping products with 
the interoperability code im- 


Connec 


mediately. 


Visa Smart-Card Hardware 
Ready, but Software Isn't 


Terminal software 
not due till year’s end 


BY LUCAS MEARIAN 
Visa U.S.A. Inc. last week an- 
nounced that the development 
of hardware needed for point- 
of-sale (POS) systems to read 
the embedded chip technology 
in its smart has been 
completed. However, the ter 
minal software needed to read 
the cards won't be available 
until late this year. 

Currently, only Foster City, 


cards 


Calif.-based Visa and New 
York-based American Express 
Co. are moving forward with 
smart cards as an alternative to 
credit cards. 

Unlike traditional credit 
cards, smart cards use an em- 
bedded chip that can be pro- 
grammed to accept, store and 
send data and is better able to 
stop card cloning and forgery. 

When the terminal software 
becomes available, several key 
merchant payment processors 
will be able to offer smart-card 
acceptance applications on 
Hypercom Corp. and VeriFone 


| come 
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McData which split off 
from EMC and went public in 
August and Brocade each 
have reseller agreements with 
Hopkinton, Mass.-based EMC. 
“From the perspective of the 
client with multiple SANs or 
that have built 
around a director-class switch 
rather than multiple eight- or 
16-port switches, this a 
nice consolidation point,” said 
Zimmerman. 

McData spokesman 
O'Brian said his company is al- 
ready conducting tests with 


ones been 


very 


Steve 


EMC’s DSI6B is one of three EMC 
switches that will be able to inter- 
operate with Brocade and McData 
devices. 

other switch vendors and is 
working on additional reseller 
agreements. 

But “this represents the first 
out of the gate and probably 
the most significant for the 
market,” he said. D 


wie 


age news, see page 24. 


Inc. terminal models. Those 
payment include 


Tempe, Ariz.-based Vital Pro- 


processors 


cessing Services and Engle- 
wood, Colo.-based First Data 
Merchant Services Corp. 

Visa is betting that about 
40% of brick-and-mortar mer- 
chants will replace their POS 
devices during the next four 
years because of outdated 
technology, officials said. 

Theodore Iacobuzio, a se- 
nior analyst at TowerGroup, a 
research and consulting firm 
in Needham, Mass., said con- 
sumers will be quick to wel- 
smart 
technology is distributed 


cards, once the 


| among retailers. The sticking 


point until now has been that 
merchants will have to “foot 
the bill for any chip card roll- 


| out,” said Iacobuzio. D 
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NEWS 


Win 2k Management 


‘Tools Set to Debut 


Microsoft, Tivoli ready to roll out products 
for midsize and large companies 


BY SAMI LAIS 


ganizations, managing 
Windows 2000 net- 
works should grow 
easier with the sched- 

uled releases of two products 
Microsoft Corp. this week 
plans to release Microsoft Op- 
erations Manager (MOM) for 
Windows 2000. Next 
Tivoli Systems Inc. is sched- 


uled to release Version 4.1 of its 


month, 


change configuration manage- 
ment tools for Windows 2000. 

“There’s a lot of common- 
ality of purpose between the 
two,” said Patrick Dryden, an 
analyst at Illuminata Inc. in 


Nashua, N.H. “MOM is orient- 


IBM Features 
Integration in 


BY JAIKUMAR VIJAYAN 

IBM is making it easier for 
companies that are involved 
in enterprise application inte- 
gration efforts to tie its DB2 
database software to multiple 
data sources and database plat- 
forms. 

The company last week re- 
leased a new version of DB2 
that features better interoper- 
ability with its WebSphere 
application server, as well as 
with its MQSeries middleware 
technology. 

DB2 Version 7.2 also intro- 
duces 
Web 
as Simple Object Access Pro- 
tocoland Universal Descrip- 
tion, Discovery and Integra- 


support for emerging 


service standards such 


tion, and new migration tools 
to help users move from com- 
peting database products to 


ed toward the tasks of opera- 


tions management. It scales 
to handle events for thousands 
of servers, but it’s a dumb 
consolidation.” 

The Tivoli tools “add intelli- 
gence for managing Windows 
systems,” Dryden said. To do 
se, he said, “they rely on func- 
tionality Microsoft built 


into the operating system and 


has 


build functionality onto that, 
such as the event simulation 
engine that is built into the 
Tivoli change management 
products.” 

MOM 2000 will advance the 
use of Windows Management 
(WMI) for 
networks, a 


Instrumentation 
Windows 2000 


etter App 
B2 Update 


DB2, according to IBM. 

The release builds on IBM’s 
efforts to help users access and 
integrate data from the widest 


variety of data sources possi- 


ble, including other databases, 
said Brant B. Davison, a pro- 
gram manager at IBM’s Data 
Management Solutions group. 

The latest iteration of DB2 
also builds on IBM’s effort to 
use its messaging and appli- 
cation server technologies for 
transporting real-time data 
from operational databases to 
various applications, accord- 
ing to Mark Shainman, an ana- 
lyst at Meta Group Inc. in 
Stamford, Conn. 

“What they have done with 
this release is to automate the 
processes required to [trans- 
port the data],” Shainman said. 

DB2 Version 7.2, for in- 


common structure on which 
products from multiple ven- 
dors can be managed and can 
manage one another, said Win- 
ston Bumpus, president of the 
Portland, Distrib- 
uted Management Task Force, 
the industry group that devel- 
oped the standard. WMI is 
Microsoft’s implementation of 


Ore.-based 


the Common _ Information 
Model (CIM) standard and the 
Web-based Enterprise Man- 
agement architecture, of which 
CIM is an element. 

MOM is based on manage- 
ment software licensed from 
San Jose-based NetIQ Corp. It 
supports the full range of Win- 
dows servers, including Micro- 
soft Active Directory, Internet 
Information Server and SQL 
Server. 

The new version of Tivoli’s 
product — inventory, software 
distribution and workload 
tools — requires the Tivoli En- 
framework 


terprise Console 
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and uses the CIM 
said a 
Austin, 
IBM. 
Tight integration with exist- 
ing tools is important to James 


manager, 
spokesman for the 


Texas-based unit of 


A. Ghericich, senior technical 
officer at The Chase Manhat- 
tan Bank. 

“The new version will auto- 
matically bring in information 
from the Tivoli Event Manager, 
something I have to do manu- 
ally now,” he said. “And it has 
hooks into WMI to let me 
use Microsoft’s internal meth- 
ods of managing the operating 
system.” D 


Homepage Worm Not a Big Problem in U.S. 


Smarter users, stronger defenses may 
have thwarted e-mail-clogging virus 


BY JENNIFER DISABATINO 
End users may have finally 
learned about the dangers of 
blindly opening e-mail attach- 
ments, and systems adminis- 


stance, lets developers treat 
message queues as if they were 
tables in the This 
makes it simpler to publish 
data from DB2 to MQSeries, 
Davison said. 

“This is more of an incre- 
mental upgrade than anything 
else,” said Jon Rubin, an ana- 
lyst at Gartner Inc., 
Stamford. D 


database. 


also in 


[ATAGLANCE 
Interoperable 


IBM’s DB2 Version 7.2 offers: 
™ Data management enhancements 
® New assist wizards 


® Data Warehouse Center enhanced with 

new sources: SAP R/3, i2 TradeMatrix BPI 
Web clickstream data, OLE DB objects and 
MQSeries messages, including XML docu- 


viding a new way to search text documents 


| using a SQL query 
| 28 DB2 Warehouse Manager Sourcing 
|SAgent for 0S/390 


® DB2 Migration Tool kit for Sybase 


trators may have heeded calls 
to better protect their e-mail 
servers. Whatever the reason, 
security said the 
Homepage e-mail worm that 
struck last week 
have done minimal damage in 
the U.S. 

Some 
vendors have been reporting 
that the self-propagating worm 
has been responsible for send- 


analysts 


appears to 


antivirus software 


ing out tens of thousands of 


e-mails. But analysts in the U.S. 
said they haven't seen a big im- 
pact from Homepage, which is 
the latest in a long line of Vi- 
sual Basic Script (VBS) worms 
that target users of Microsoft 
Corp.'s Outlook software. 

For example, the CERT Co- 
ordination Center at Carnegie 
Mellon University in Pitts- 
burgh said it had received only 
three direct reports of users be- 
ing hit by the worm. And there 
were only a handful of postings 
about Homepage in the online 
security discussion forums run 
by San Mateo, Calif.-based Se- 
curityFocus.com Inc. 

Firms that are screening and 
blocking .vbs files at e-mail 
gateways should “in effect [be] 
immune to this,” said Eric Hem- 
mindinger, an analyst at Ab- 


| erdeen Group Inc. in Boston. 


Homepage began spreading 





JUST THE FACTS 


Really Uncool 


| What: Homepage e-mail worm, the latest 


in along line of VBS worms that target 
users of Microsoft's Outlook software 


When: Sent around the world last week 


Lure: A “really coo!” Web page 


Payload: Not destructive but could clog 
corporate e-mail servers 

Defense: Screening and blocking .vbs files 
at e-mail gateways 

late Tuesday by luring users 
to open an attachment that 
supposedly contains a “really 
cool” Web page. Instead, the 
attachment launches one of 
four pornographic Web sites 
and then attempts to send it- 
self to all of the users listed in a 
victim’s Outlook address book. 

“This thing really is very un- 
original,” said Ryan Russell, an 
analyst at SecurityFocus.com. 

Homepage appears to have 
been written with the same 
virus tool kit that was used to 
create the AnnaKournikova.- 
jpg.vbs worm earlier this year. 
The Homepage worm is said to 
not carry destructive payloads 
that could damage infected 
computers. 

The greatest threat to users 
is that the worm could clog 
corporate e-mail servers. Lon- 
don-based Baltimore Tech- 
nologies PLC said Homepage 
had infected one out of every 
55 e-mail messages it tracked. D 
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Ariba, i2 to End Online 
Marketplace Team 


Ariba Inc. will end its collaboration 
with i2 Technologies Inc. because it 
doesn't see a viable future for online 
marketplaces, Ariba executives said 
last week. Instead, the software 
vendor plans to focus on procure- 
ment; supply chain management; 
and collaborative planning, fore- 
casting and repienishment - areas 
in which it competes with Dallas- 
based i2. Mountain View, Calif.- 
based Ariba is active in an alliance 
that creates online marketplaces 
with i2 and IBM and said it will con- 
tinue to support existing exchanges. 


House Files Bill for IT 
Training Tax Credit 


The backers of a bill filed in the U.S. 
House of Representatives last week 
said it would provide a tax break to 
companies and individuals who in- 
cur IT training expenses. The bipar- 
tisan bill mirrors a version filed in 
the Senate two weeks earlier that 
would provide a $1,500 tax credit 
per worker, per year for IT training. 


EN OE SAREE AIT BPM ET 


Short Takes 


BRITISH TE 


S LECOMMUNICATIONS 
PLC in London confirmed that it 
plans to spin off its wireless busi- 
nesses as a separate company 
called BY WIRELESS. Other opera- 
tions will continue as BT FUTURE. 

. .. Striving to cut costs, MERRILL 
LYNCH & CO. in New York said it 
plans to reduce its workforce by 
900 employees, including 150 tech- 
nology consultants. . . . SIEMENS 

AG in Munich, Germany, plans to 
cut an additional 2,000 jobs at its 
information and communications di- 
visions, bringing the total number of 
job cuts at the divisions to 8,100, or 
about 1.9% of its workforce. . . . 
SABRE HOLDINGS CORP. in Fort 
Worth, Texas, signed a deal with 
COMPAG COMPUTER CORP. with a 
potential value of $30 million to of- 
fer a variety of desktop PCs, note- 
book computers and services to 
more than 15,000 Sabre travel 
agencies. 
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Class of 2001 Faces 
Shaky Job Market 


Companies rescind tech job offers, 
cancel annual campus recruiting trips 


BY JULEKHA DASH 


OB HUNTING has been 


like a 


chairs for 


game of musical 


this year’s 
graduating seniors. 
Unlike last year, when 
students waited until 
they had several choices be 
fore picking the right employ- 
er, this year’s layoffs and sour 
economy have students jump- 
ing at job offers, according to 
Patricia Rose, director of ca- 
reer services at the University 
of Pennsylvania. Some firms, 
particularly in the technology 
and consulting industries, are 
even rescinding offers and can- 
celing campus visits. 
he majority of [recruiters] 
want experienced people,” said 
Arif Hajee, a computer science 
major who's graduating this 
from the 
Texas at Austin. Hajee expect 
ed to begin working at Web 
consulting firm Sapient Corp., 
but the Cambridge, Mass.- 
based firm rescinded its offer 
two months ago and gave him 
two weeks’ salary as compen- 


week 


sation. 


Top Firms, Grads Affected 


Other companies that have 
taken back offers to students 
include Dell Computer Corp. 
and Cisco Systems Inc. Dell 
wouldn't specify how many of- 
fers it had rescinded. A Cisco 
official said the company with- 
drew offers to about seven or 
eight students within the past 
few weeks. 

Even at some of the nation’s 
top technology schools, fewer 
firms are recruiting students. 
This spring, 76 companies can- 
on-campus 
Carnegie Mellon University in 
Pittsburgh, according to Judy 
Mancuso, associate director at 


celed visits to 


the school’s career center. And 
recently, about a dozen stu- 


University of 


dents had offers rescinded 

“We have some of the most 
talented students in the 
world,” she said, adding that 
companies need to be aware 
that rescinding offers can harm 
their long-term relationships 
with the school 

Entry-level 


niors with business and tech 


salaries for se- 


nology degrees average about 
$40,000 to $50,000, according 
to a salary survey from the Na- 
tional Association of Colleges 
and (NACE) in 
Bethlehem, Pa. But that figure 


Employers 


represents data culled in the 
fall, when the 
stronger, said Camille Lucken- 
baugh, employment informa 
tion manager at NACE. The as 
won't 


economy was 


sociation have spring 


salary figures until the fall. 


HP to Expand 
Alliance With 


Will focus on legacy 
migration, integration 


BY JULEKHA DASH 
Hewlett-Packard Co. and Ac- 
centure last week announced 
that they will expand their IT 
outsourcing alliance. They will 
now focus on migrating clients 
from legacy applications to 
newer technologies such as 
Web-based and wireless sys- 
tems and on supporting back- 
ward integration with legacy 
applications. 

In a call last 
week, HP and Accenture said 
the deal formalizes a three- 
year collaboration to support 
enterprise resource planning 


conference 


But 
with good job offers and gener- 
ous starting salaries are wor- 


even college seniors 


ried, given the state of the 
economy. 

Carnegie Mellon senior and 
computer science major Jessey 
Paul received assurances from 
a human resources representa 
tive at Morgan Stanley Dean 
Witter & Co. in New York that 
the offer she received in the 
fall is safe despite a recent lay- 
off at the Wall Street 
ment banking firm. But after 
recent 
ceive pink slips from their first 


invest- 


seeing graduates re- 
jobs, Paul said she doesn’t be- 
lieve there are any guarantees. 
“I need to live in New York 
and pay $1,000 in rent, and the 
possibility of not having any 
income is frightening,” she 
said 
Some students unhappy 
with their job offers have de- 
cided to 


remain in school. 


Regina Clewlow, a computer 


utsourcing 
onsulting Firm 


projects for 15 clients, includ- 
ing Halliburton Co. in Dallas. 


Chicago-based Accenture 
(formerly Andersen Consult- 
ing) will design and implement 
applications, while HP will 
manage and operate them. The 
partnership is aimed at en- 
abling the two firms to com- 
pete with IBM Global Services, 
the companies said. 


Ann Livermore, president of | 


HP Services, dismissed sug- 
gestions that the alliance was a 
“consolation prize” in the wake 
of HP’s failure to acquire the 
consulting division of New 
York-based Pricewaterhouse- 
Coopers last year. 

HP and Accenture said they 
expect that formalizing their 
outsourcing alliance will en- 
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Goodbye, Grads 


Companies withdrawing job 
offers include: 

DELL: Rescinding an un- 
specified number of offers 
to MBA interns and college 
students; offering college 
seniors one month’s com- 
pensation 


CISCO: Withdrawing 

8% to 9% of about 80 offers 
to students; providing 90 
days’ pay, plus résumé and 
outplacement services 


SAPIENT: Rescinded an 
unspecified number of its 
job offers to prospective 
college graduates. 


science major and president of 
the engineering club at Cornell 
University in Ithaca, N-Y., will 
stay on campus next year to get 
a master’s in management in 
engineering, which she hopes 
will help her land a job in busi 
ness strategy consulting. 

“It’s not 
been for students in the past,” 
claimed Luckenbaugh. “Stu- 
dents have to sell themselves 
more, and employers are more 


as easy as it has 


selective.” D 


able them to 
sourcing blueprint and deliver 
rapidly for 


create an out- 
services 
clients. 

“Soft economic periods tend 
to make customers interested 
in outsourcing,” she said. HP 
already derives between 10% 
and 15% of its services revenue 
from deals related to its exist- 
ing partnership with Accen- 
ture, she added. 

Bill Martorelli, a vice presi- 
dent at Hurwitz Group Inc. in 
Framingham, Mass., said sev- 
eral consulting 
tried to expand their outsourc- 
ing-related work because the 
deals are typically long-term 
and provide an ongoing rev- 
enue stream. 

Service firms will increas- 
ingly partner with other com- 
panies that offer complemen- 
tary services so that they can 
offer more customization for 
enterprise customers, said 
Bruce Caldwell, an analyst at 
Dataquest Inc. in San Jose. D 


more 


firms have 
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US.-China Cyberfeud 
Shows No Site Is Safe’ 


Recent hacker attacks demonstrate how 
any Web site can become random prey 


BY JAIKUMAR VIJAYAN 
HAT DO THE | 
city of Ker- 
ville, Texas, 
Primal Ele- 
ments Inc. 

in Garden Grove, Calif., and | 

Bubbles Car Wash in Houston 

have in common? 


All three are examples of | 
automated scanning tools 
and hacker probes can make 
random prey of any site, in- 
cluding those that might other- 
wise seem to be improbable 


how 


hacker targets, analysts said. 
The sites of all three organi- 

zations were victims of the on- 

going spat between Chinese 


recent diplomatic crisis involv- 


Continued from page I 


Solaris 


was developed through a col- 
laborative effort that involved 
ongoing feedback on _ the 
benchmark’s drafts from tech- 
nicians at some of the member 
companies, Shell’s 
Unix gurus. 

Donna Francis, who manages 
compliance security and policy 


such as 


| because they 
| tunity 
| than 


| hacker may 


| Severna Park, Md., 


| pany 
| pany 


| apply the recommended patch- 


| es and updates when they be- 
| come 
| tomated 
and U.S. hackers following the | 
| ties, Winkler added. 


| NJ., 


ing the two countries (see re- 
lated story, page 20). 

Sites often get hacked simply 
present an oppor- 
vandalism rather 
they represent 
any ideology or cause that the 
said Ira 
Winkler, president of Internet 
Security Advisors Group in 
and author 
of Corporate Espionage (Prima 


for 
because 


espouse, 


| Publishing, 1999). 


Often, all it takes for a com- 
to mitigate its risk is to 


available, since most au- 
scanning are 
looking for known vulnerabili- 


tools 


for the IT 
America Inc. in Cherry Hill, 
said the benchmark’s col- 
laborative approach will help 
fill security knowledge gaps. 

“A [single] company can’t al- 


| ways experience all the things 
| that go wrong,” 
| just impossible.” 


she said. “It’s 
But the true test of the 
benchmark will be its useful- 
ness over time, said Francis. 
“How are they going to keep 
it updated?” she said. “How 


Benchmark Overview 


The Center for Internet Security (www.cisecurity.org) will 
release its Solaris systems benchmark next month. 


WHAT WILL BE AVAILABLE: ‘rhe cis will offer public access to 


the benchmark ruler, which will define security settings for 
Solaris systems, depending on level of security sought. The 
full benchmark, which will include supporting information 
and references, will be available to members. The CIS is con- 
sidering becoming a subscription-based service rather than a 
membership-based organization. 


WHAT'S UP NEXT: It’s next benchmarks include Windows 2000 
and NT; Unix variants, including IBM’s AIX; and Linux. 


aw Apply all recommended f 


| ws Make sure your home 


group at Subaru of | 
| experience 
| the coming months as things 


| change?” 





| Defending 
| Your Web Site 


| Companies should take the fol- 
| lowing steps to avoid attacks: 


yatches and 
software updates on ail Internet-connected 
systems not just the big servers 

uw Make sure all internet-co or mnected sys 
tems are properly configured 
page is “read only.” 


Companies can also mini- 


| mize their risk by making their 
| Web home page “read only 
| getting rid of the cmd.exe DOS | 
| prompt on their Web servers, | 
| which is often exploited by 
| hackers to generate malicious 
| commands, said Russ Cooper, | 
| an analyst at 


” and 


security 
TruSecure Corp. in Reston, Va. 
In attacks that rely on hacker 


are people going to add their 


next year or in 


Clint Kreitner, the CIS’s pres- 
ident and CEO, said the goal is 


to keep Solaris current through | 


information it gets from mem- 
bers, vendors and others. 
CIS will also certify tools. 

Other planned benchmarks 


will deal with Linux and Mi- | 


crosoft Corp.'s Windows 2000 
and NT. The organization in- 
tends to release the Solaris 
benchmark next month. 

“This is a consensus effort,” 
said Kreitner. “We're not a 
commercial organization with 
something to sell. The knowl- 
edge is out there; it’s just un- 
evenly distributed.” 

The value to companies 
will vary. Deborah Eagan, se- 
curity coordinator at Lincoln 


Electric System, a Nebraska- | 


based utility with about 
110,000 customers, said that 
as a smaller company, Lincoln 
Electric will still have to use 


tools, 


firm | 


| ous network services, 


“the first thing to re- 
member is that the actual tar- 


| get is often not one that is cho- 


but that is found,” 
Cooper said. 

The tools basically 
entire ranges of IP addresses 


for known vulnerabilities that 


sen, one 


hackers can then exploit. Even | 


large companies with vigorous 
security measures protecting 
their main Web servers often 


overlook smaller Internet-con- | 


nected servers in their enter- 
prises. Such servers can easily 
be discovered through scan- 
ning and then used to enter 


| corporate sites,Cooper said. | 
Just last week, the CERT Co- | 


ordination Center at Carnegie 
Mellon University in Pitts- 


| burgh issued a warning about a | 


“dramatic increase in network 
reconnaissance activity” in- 
volving vulnerabilities in vari- 
includ- 


| for vulnerabilities to 


search | 
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ing one that has been known 
for more than two years. 

Only a week earlier, the Na- 
| tional Infrastructure Protec- 
tion Center in Washington 
warned about a significant in- 
crease in Unix-based network 
| scanning and probing activi- 
ties. The scans were looking 
launch 
denial-of-service attacks 

“To a hacker, you are just an 
IP address. ... You get hit be- 
cause you let yourself be an 
easy mark,” said Winkler. 

Take Bubbles Car Wash, 
whose Web site was defaced 
with anti-American graffiti a 
week ago. “I was real sur- 
prised, because we are not a 
high-profile site,” said CEO 
William Lawrence. 

Primal Energy, a manufac- 
turer of soaps and beauty 
products, was hit by hackers 
claiming to be pro-Chinese. 

“Obviously, we were all aware 
of the issue, but we certainly 
didn’t expect to be a target,” said 
Allan Guarino, a vice president 
at Primal Energy. From now on, 
the company plans to imple- 
ment all of the recommended 
patches when they 
available, he said. D 


become 





The | 





Comparative Analysis 


The CIS's benchmarking effort is 
primarily a technical initiative. But 
companies interested in broader 
approaches to security can take 
an approach similar to the one 
used by Ford Motor Co. 

Last July, Ford embarked on 
a $100 million security upgrade 
after benchmarking its IT security 
processes against those of some 
other, noncompeting companies, 
including Intel Corp. and Motoro- 
la Inc. 

“What level of security do they 
have in place?” said Patrick Milli- 
gan, Ford's manager of security, 
strategy and technologies, who 
spoke at the Secure E-Business 
Conference last week in Arlington, 


consultants. But Eagan said 
she believes the standard will 
enable the utility to “get much 
more out of the consulting ex- 
perience.” 

Carmen Banks, information 





Va. Ford shared its internal assess- 
ments with the companies involved 
and compared their security prac- 
tices with its own processes. 

Milligan advised other compa- 
nies considering taking a similar 
route to decide upfront whether 
to utilize consulting services in 
support of benchmarking or to do 
it internally. 

While big consulting firms offer 
excellent consulting services, he 
said, “we at Ford did the bench- 
marking ourselves to gain a better 
understanding of security prac- 
tices/procedures utilized in indus- 
try, so that we could effectively 
develop our internal strategy.” 

- Patrick Thibodeau 


security manager at Hallmark 
Cards Inc. in Kansas City, Mo., 
said the benchmark will be 
helpful as a standard to mea- 
sure subsidiary and business- 
partnership security. D 
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FBI Warns of More | seniceberied 
Cyberattacks 


Site administrators urged 
to inspect logs for signs 


BY TODD R. WEISS 

EB SITE administra- 

tors are being ad- 

vised by the FBI’s cy- 

bercrime division to 

be especially vigilant 

in looking for evidence of distributed 

denial-of-service (DDOS) attacks that 
have recently hit Web sites 

In an advisory issued last week by the 

FBI’s National 

tion Center (NIPC), the agency said it 


Infrastructure Protec- 
has received information about “ongo- 
ing attempts to disrupt Web access to 
several sites.’ 

The NIPC advisory came after a 
DDOS attack on the White House Web 
site on May 4. That attack lasted from 
about 8 to 11:15 a.m. EDT, causing so 
many automated requests for informa- 
tion that the servers were overloaded. 

An NIP¢ 
elaborate on the advisory. 

Last week’s notice followed an NIPC 
month of an expected up- 
swing in attacks by Chinese hackers 


spokeswoman declined to 


warning last 


against U.S. servers as a result of an in- 
crease in political tensions between the 
two countries. 

The latest attacks cited by the NIPC 
have been seen on several networks, us 
ing data fragmented into large User 
Datagram Protocol (UDP) packets for 
transmission. The packets are directed 
at the commonly used Port 80. 

The attackers are apparently using 
this method to try to bypass standard 
port protocol blocking techniques, ac- 
cording to the NIPC. 

To detect such attacks, network ad 
should firewall 


ministrators inspect 


logs and other records for evidence of 


fragmented UDP packets directed at 
Port 80. Such inbound packets indicate 
that a denial of service to the network 
may be Outbound UDP 
packets indicate that there’s a high like- 
lihood that the network is already com- 
promised by hacker DDOS software. 

A special utility to detect DDOS soft- 
ware is available from the NIPC at 
www.nipe.gov/warnings/advisories 
2000/00-055.htm. 

Ric Steinberger, technology director 


under way. 


ine Inc., formerly known as Security- 
Portal.com, said such attacks have been 
common for years. Steinberger said he 
believes the NIPC issued this latest ad- 
visory in direct response to the DDOS 
attack on the White House Web site. 
“The NIPC needs to issue alerts when 
more federal Web sites have 
been attacked in this way,” he said. 


one or 


Most private business sites probably 
have Web servers equipped with fire- 
walls that can help thwart these types 


Postal Service 
To Upgrade 
Technology 


BY LINDA ROSENCRANCE 
The U.S. Postal Service is planning to 
upgrade its letter-recognition technolo- 
gy, a move that the service says will 
save more than $92 million per year. 
Postal spokesman Mark | 
Saunders said the improvements will | 
increase the rate at which current opti- 
cal readers are able to read handwritten 
and machine-printed 
from the current 75% to 93%. Just five 
years ago, the equipment, called Opti- | 
cal Character and Remote 
Computer Readers, could read only 5% 
to 10% of those letters, he said. 
Saunders said the new technology 
enhancements are part of a program in- 
troduced in 1996 that will save 


Service 


poorly letters 


Readers 


the | 


A MAIL HANDLER sorts packages at a Postal Service center 
| in Boston. Improvements in optical technology will reduce 
at San Francisco-based AtomicTanger- | the number of items that require manual intervention. 


How DDOS attacks work: 


= Hackers overload targeted computer net 
works by smothering them with reams of data 
= The overloads cause the networks to slow 
and eventually stop responding. 


= At present, there are no sure ways to 
halt DDOS attacks. 


of attacks, said Steinberger. Govern- 
ment sites, however, are usually more 
vulnerable because their staffs aren’t as 
highly their private-sector 
counterparts and don’t have access to 


paid as 


the most current software and hard- 
ware defenses, he said. D 


agency $92.5 million when it’s fully im- 
plemented in 2004. 

According to the Postal Service, mail 
that can’t be sorted by high-speed au- 
tomation has traditionally been sorted 
manually, at a cost of more than $55 for 
every 1,000 letters. Sorting the letters 
using optical readers costs only $5 per 
1,000 letters. 

Now, mail that’s so illegible that it 
can’t be read by this automated sorting 
equipment is scanned and the scanned 
image is sent off-site to remote encod- 
ing centers, Saunders said. At these 
centers, Postal Service contractors read 
the scanned image of an envelope, man- 
ually type in the address information 
and electronically transmit this data 
back to the mail processing plant, 
where a bar code is applied to the mail, 
which is then re-sent to the automated 
readers. 

The Postal Service has about 35 of 
these centers, down from an initial 55. 
The service expects to close more sites 


| as the technology improves. “The pri- 


mary benefit from increased read rates 
will be reductions in the need to manu- 
ally key address informa- 
tion through the remote 
encoding centers,” said 
Thomas Day, the Postal 
Service’s vice president 
of engineering, in a state- 
ment. 

As well as upgrading 
its optical readers, the 
Postal Service plans a $16 
million upgrade to its In- 
tegrated Data System, an 
information collection 
and management system. 
The project will be head- 
ed by Lockheed Martin 
Distribution Technolo- 
gies in Oswego, N-Y.D 
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| on their Shark product,” said 
Gaylen Schreck, an analyst at 


rester Research Inc. 


Competitive Market Forces xeric 
Storage Vendors to Cut Deals 


Enterprise prices drop 24% in first quarter 


BY LUCAS MEARIAN 
MID EMC Corp.'s 
denials that rivals 
in the data stor- 
age market such 
as IBM and Hi- 

tachi Data Systems Corp. are 
gaining ground, analysts said 
increased competition created 
by a slumping economy is forc- 
ing vendors to be more aggres- 
sive deal makers. 

In the first quarter of this 
year, prices for raw capacity | 
in enterprise-class storage sys- 
tems dropped 24%, compared | 
with an overall drop of about | 


35% for all of last year, accord- 
ing to Enterprise Storage 
Group Inc., a research firm in 
Milford, Mass. 

When IBM released its first- 
quarter financial report last 
month, it claimed that its Shark 
Enterprise Storage System was 
biting into EMC’s Symmetrix 
customer base. IBM said Shark 
server sales grew 82% from 
last year and had penetrated 
58% of EMC’s top accounts and 
63% of the top 100 global com- 


| panies. The firm said its sales 


leap was largely the result of 
its move into Linux-based sys- 


Sun Sharpens Focus on One- 


Users cite lower 
pricing than EMC 


BY ASHLEE VANCE 
Sun Microsystems Inc. has at- 
tacked the storage market with 


a vengeance, as company offi- | 
cials talk up acquisitions, in- | 
vestments and new products. | 


The vendor claimed its server 


and storage pairing gives cus- | 


tomers one place to shop and 
“one throat to choke,” position- 
ing Sun well against storage 
king EMC Corp. 

The company recently final- | 
ized its acquisition of Eagan, | 
Minn.-based storage software | 


maker LSC Inc., and on May 7, | 
Sun launched a set of storage | 


appliances — the StorEdge 
N8400 and N8600 network- 
attached storage (NAS) prod- 
ucts — designed to give users 
storage space while requiring 
minimal configuration effort. 
In addition, Sun CEO Scott 
McNealy said last week that 





the company would continue 


making 
throughout this year. 
Sun may talk a good game, 


storage 


but analysts said the vendor | 


will need to live up to its words 
to gain market share in a lucra- 
tive space. 

“Sun tells a good story, but it 


said Roger Cox, an analyst 
at Stamford, Conn.-based Gart- 
ner Inc. 

The StorEdge products are 
only Sun’s second and third 
NAS products, marking a slow 


move toward a high-growth | 


market. Beyond its limited 
NAS line, Sun has also been 
losing share in the market for 


| 
storage products linked to its | 


Solaris operating system, falling 
behind EMC in a sector that it 
should own, said Cox. 

“Sun only got about 32% of 
that market, when they should 
be getting 100%,” he said. 

While Sun acknowledged 
that it has moved late in parts 
of the storage market, many 
customers said they’re 
pressed with the company’s 


no headway in the open-sys- 
| tems marketplace. 


| nobody 
| tomer lists. Any stats [IBM 


acquisitions | 
| lower than those of EMC for | 
competing products, and with | 
| 
| 
| 


| servers and storage, it meant a | 
only holds up in some cases,” | 


im- | 





tems and companies’ decisions 


to “shun” proprietary systems. | 


The competition “is looking 
over their shoulder, and we're | 


| breathing down their neck,” 
| said Bob Mahoney, IBM’s vice | 
| president of storage network- 


ing sales. 
EMC, in Hopkinton, Mass., | 


| scoffed at what it called “fuzzy” | 
| math being used by IBM to | 
| produce its 


sales numbers, | 
claiming that IBM was making | 
“As far as our top accounts, | 
releases their cus- | 


uses] regarding that are false | 


| by default,” said EMC spokes- | 


man Michael O’Malley. “EMC | 


top Storage 


prices, which are generally 


its arguably lower costs for 
managing those products. 
“By getting on a single plat- | 


| form across the board with | 


| 
single engineer could support | 
both sets of hardware,” said 
Brad Whitley, a network engi- 
neer at Devon Energy Corp. in | 
Oklahoma City. “With Sun stor- 


I think EMC 
recognizes the | 

challenge of 
moving from 
selling iron to 

selling bits. 


FRANK AUER, VP OF OPERATIONS, 
GALILEO INTERNATIONAL 





translates to $610 million in in- 


one is even close to that.” 
Others said undercutting the 


competition has had more of | 
| an impact than a move into | 
| open platforms. 

“Anecdotally, I know IBM is | 


offering very competitive deals 


Fuzzy Math? 


IBM claims it has penetrat- 
ed 58% of EMC’s top accounts. 


EMC says IBM's claimis 
“false by default” because the 
company doesn't release its 
customer list. 


| age, you are able to manage it 
| with a common interface you 
are used to when managing | 


their servers.” 

While Sun’s all-in-one ap- 
proach may give it an edge, 
analysts and customers said 


| Hopkinton, Mass.-based EMC 


is also adding management 
features as it expands main- 
frame-style storage with net- 
worked technology. 
challenge of moving from sell- 
ing iron to selling bits,” said 
Frank Auer, vice president of 
operations at Galileo Interna- 
tional Inc., a longtime EMC 
customer in Rosemont, Ill. 
EMC’s software functional- 
ity and scalability handily beat 
Sun’s products, Auer said, 
leading him to conclude that 
EMC can deflect challenges. 
Many analysts agreed, say- 
ing EMC will dominate storage 
for some time to come. The 
same analysts, however, also 
said that Sun has obviously 
sharpened its focus on storage 
and that the whole-system ap- 
proach could pay off. D 


Vance writes for the IDG News 
Service in San Francisco. 


EMC's pricing.” 


| 
I think EMC recognizes the 





Schreck and other analysts 


| said EMC is also cutting deals 


to beat the competition. 
“They're certainly not being 


| public with us in regard to dis- 
grew 37% in Ql. That 37% 


counting they might be doing,” 


| Schreck said. “When it comes 
creased storage revenue. No | 


to signing on the line, it’s an- 


| other story.” 


Steve Duplessie, an analyst 
at Enterprise Storage Group, 
noted that Hitachi is also per- 
forming well in the storage 
market. The Santa Clara, Calif.- 
based company recently saw 
its fourth-quarter sales leap 
to almost $500 million, from 


| about $280 million in the pre- 


vious quarter. 

Duplessie said more vendors 
are “getting a shot [at the en- 
terprise storage market] now, 
because if you're cheaper, 
people are going to look at 
it or use it to drive down 


Duplessie added that al- 
though IBM is making head- 
way in the storage space, it’s al- 
most exclusively in IBM main- 
frame environments, “where 
you would expect they would. 
But they’re not a force in open 
systems.” 

As storage vendors are being 
affected by a tightening econ- 
omy, technology is producing 
more efficient and inexpensive 
means of storing data. 

Roger Cox, chief analyst at 
Stamford, Conn.-based Gart- 
ner Inc.’s Dataquest unit, said 
the cost of raw disk storage 
normally drops by 35% to 40% 
annually because of more effi- 
cient technology in the form of 
cheaper, denser disks. 

As the cost of raw storage 
plummets, the price paid for 
software to manage it increas- 
es. Analysts said that for every 
$1 spent on tape or disk stor- 
age, it costs $4 to $7 more 
to manage it. 

“You'll see the hardware part 
go down,” said H. Clinton 
Vaughan, an analyst at New 
York-based Salomon Smith 
Barney Holdings Inc. “But 
you'll also see people saying, 
‘Now I have a ton of disk drives 
and arrays. How am I going to 
manage it all?” D 
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TR Too 


Cisco Reports $2.78 
Loss in Third Quarter 


Networking market leader Cisco 
Systems Inc. last week reported a 
$2.7 billion net loss for its fiscal 
third quarter, driven largely by 
charges taken to cover layoffs, in- 
ventory writedowns and other re- 
structuring moves detailed last 
month. Cisco said revenue in the 
quarter ended April 28 dropped 4% 
on a year-to-year basis, falling to 
$4.73 billion. 


CA Builds Wireless 
Partnerships 


Computer Associates International 
Inc. last week announced a deluge 
of wireless partnerships aimed at 
beginning what it calls the second 
phase of its mobile e-business 
plans. The announcements, cover- 
ing everything from partnerships on 
mobile application development and 
management to network adminis- 
tration using mobile phones, team 
the company with Broadbeam Corp., 
w-Technologies Inc., Novarra Inc., 
Kyocera Wireless Corp., MobileSys 
Inc. and Wireless Knowledge Inc. 


Short Takes 


Disaster recovery vendor COMDIS- 
CO INC. announced that it’s laying 
off 250 people, or almost 10% of 
its workforce, after reporting quar- 
terly losses. . .. COMPUTER ASSO- 
CIATES overstated its annual oper- 
ating profit by about $140 million 
last month when the preliminary 
financial results for its last fiscal 
year were reported. The company 
said the mistake was the result of a 
typographical error. . . . Internet 
host EXODUS COMMUNICATIONS 
INC. last week announced layoffs 
and an executive departure. The 
Santa Clara, Calif.-based company 
said it will trim 15% of its 4,500 
employees worldwide, in the wake 
of a quarterly loss. Also, Chief Fi- 
nancial Officer R. Marshall Case is 
leaving the company for personal 
reasons; former CFO Dick Stoltz 
will temporarily resume those re- 
sponsibilities. 


Lower component costs driving price cuts 


BY BOB BREWIN 

Lower component costs, slow- 
er demand and competitive 
pressures all factored into a 
round of desktop PC price cuts 
announced last week by three 
top PC makers. 

Compaq Computer Corp. 
slashed prices on one line of 
corporate desktop PCs by 31%. 
Hewlett-Packard Co. cut prices 
on its business desktop PCs by 


Lawson Web-Enables 
Flagship Business Software 


Company’s strategy 
still focuses on some 
vertical markets 


BY MARC L. SONGINI 
Lawson Software last week de- 
tailed plans to make its suite 
of business applications more 
Web-enabled and automated, a 
strategy that was met with ap- 
proval by some of the atten- 
dees at the company’s annual 
user conference here. 

St. Paul, Minn.-based Law- 
son said a new version of its 
flagship software, dubbed Law- 
son.insight 8.0.2, is due for 
general release in August with 
expanded modules aimed at 
users in the health care market 
and other vertical industries. 

For example, applications 
supporting workforce perfor- 
mance analysis, online pro- 
curement and Web-based re- 
cruiting and hiring are being 
upgraded with capabilities 
specific to health care users. 

The company plans to even- 
tually roll out new portal, on- 
line data analysis and wireless 
applications to support the 
Lawson.insight suite, accord- 
ing to company executives. 


as much as 28%, and Dell Com- 
puter Corp. dropped prices on 
its consumer desktop models 
by 20%. 

This round of price cuts is a 
“skirmish on the outskirts of 
a potential price war,” said 
Chris Murphy, an analyst at 
IDC in Framingham, Mass. 
“Dell has been very aggressive 
in pricing for the pz 
months, and some of the other 


t several 


That part of the development 
plan includes the future addi- 
tion of support for the Wire- 
less Application Protocol and 
for running data analysis 
queries from wireless devices. 

Jay Coughlan, who was 
named Lawson’s CEO two 
months ago, said at the confer- 
that company will 
continue its strategy of selling 
only to certain verti- 
cal industries — pri- 
marily, health care, 
retail and the 
vices and govern- 
ment sectors. 

Coughlan added 
that Lawson plans to continue 
avoiding manufacturing in- 
dustries, where giants like SAP 
AG dominate. 


ence the 


ser- 


/finance 


User Anticipation 

“T’d like to see [the promised 
upgrade] rolled out,” said Pe- 
ter O'Neill, project director 
for management information 
systems at Yale New Haven 
Health System, a network of 
three hospitals based in New 
Haven, Conn. He said he has a 
strong interest in Lawson’s in- 
creased focus on Web-based 
processing. 

The three hospitals recent- 
ly installed Lawson’s earlier 
Insight 7.0 applications for 


MOREONLINE 


For more industry news, 
visit our Web site. 
www.computerworld.com 


PC Makers Preparing for Price War 


vendors want to keep up, as 
far as price perception goes,” 
he said. 

Murphy added that 
component costs have allowed 
manufacturers to pass savings 
on to customers. “Memory 
prices are particularly 
pressed, which translates into 
lower price points [for PCs],” 
he said. 

Steve Telaroli, North Ameri- 


lower 


de- 


can product business manager 
for the Compaq DeskPro line, 
said he agrees that reduced 
prices on memory have pushed 


procurement and finance, and 
they’re now adding human re- 
sources and payroll applica- 
tions. 

O'Neill said he would have 
preferred to go with Lawson’s 
8.0 series because of its online 
capabilities, but that version 
wasn't available when the im- 
plementation began. 

Cutting labor costs by auto- 
mating business processes is 
especially appealing to users in 
the cost-conscious health care 
field, said Bill Myers, director 
of materials management at 
Mission St. Joseph’s Health 
System in Asheville, N.C. Mis- 
sion St. Joseph’s runs 
Lawson’s human re- 
sources, payroll and 
materials manage- 
ment applications. 

Now, Myers said, 
the company is testing 
a customized employee self-ser- 
vice tool from Lawson that 
would automate inventory-re- 
ceiving functions. The goal is to 
reduce the number of packages 
lost or erroneously processed, 


| an outcome that Myers said 
| could save Mission St. Joseph’s 


thousands of dollars by reduc- 
ing the manpower needed to 


| search for missing inventory. 


“It was almost impossible to 


| track [inventory] using manual 
| systems, with the volume of or- 


ders,” Myers said. “Using paper 
takes a long time.” 
The self-service application 


| is expected to be ready for use 


by the end of this month, he 
added.D 


Chop Chop 


Last week’s desktop price cuts: 


prices lower, as have processor 
price cuts made by Intel Corp. 


“We've had a 


processor price cuts [from In 


number of 


tel], which allow us to contin- 
ue adding value,” Telaroli said 

Compaq slashed prices by 
31%, or $577, for its DeskPro EN 
model with a 1-GHz Pentium 
III processor, 256MB of RAM 
and a 20GB hard drive, bring- 
ing the price to $1,283. The 
company dropped the prices of 
its DeskPro EX with a 1-GHz 
Pentium III, 128MB of RAM 
and a 40GB hard 


about 21.5%, or $286, to $1,102 


Trickle-Down Effect 


Achim Kuttler, 


PC client business at HP, said 


drive by 


director of 


“difficulties in the economy” 
and lower component costs 
factored into the company’s de- 
cision to slash prices by 28% 
The company 
HP Vectra v1800 model desk- 
top PCs for $1,299, with mini- 
tower v1800 models priced 
at $1,349. 

Dell reduced prices on its 
Pentium 4-powered Dimen- 
sion PCs with a 1.7-GHz chip 
by 20% to $1,349 and cut prices 


r ] it 
now sells its 


on a corporate desktop model 
with a 1.3-GHz Pentium 4 to 
$1,199. 

Dell 
Camden said the company in- 
tends to keep up the pricing 
pressure on the competition, 
within certain limits 

“Dell has said publicly since 
the beginning of the year that 
we would offer very aggressive 
pricing and go after market 
share,” Camden said. “Will we 
be undersold? I guess a better 
way to put it is that we will de- 
cline to bid when a company 
asks for pricing that Dell does 
not believe is in the best inter- 
est of its shareholders.” D 


spokeswoman Anne 
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P2P for IT Execs 


IS MISSION-CRITICAL to leading corporations, but 


you'd never know it 


from the size of the CIO pay pack- 


et. According to an exclusive Computerworld survey 
detailed in this week’s Cover Story, fewer than 5% of 


Fortune 1,000 CIOs are named on the 
proxy statement. Only 46 of these 
companies compensate their IT lead 
ers on a par with other senior busi- 
ness executives. And while corporate 
vision and business strategy often rest 
upon the success of IT as a competi- 
tive weapon, many CIOs still hit a wall 
when they try to claim a seat in the 


executive suite. 


at http://exec.computerworld.com 
and join in this online discourse with 
your peers. 

In the arena of off-line peer net- 
working, we’re also trying to do our 
part. Next week at our Premier 100 IT 


Leaders conference in Rancho Mirage, 


Calif., we will honor the best practi- 
tioners in the field. We'll provide a fo- 
rum for users to debate pressing in- 


PATRICIA KEEFE |S 


What's the real problem here? It 
could be the lack of mission-critical 
connections, frankly. As a relatively 
new executive position, CIOs just 
don’t have the well-established peer 
networks that serve their business counterparts 
so well. We'd like to help change that. This week, 
we're introducing Computerworld Executive 
Suite, a private online community where IT lead- 
ers can meet and talk about technology issues and 
business problems. 

rhink of it as a one-stop professional con- 
nection built for busy IT execs. We’ve stocked 
this new community with exclusive content, on- 
line services, research and other professional re- 


sources. We invite you to apply for membership 


es, 
TF 


Al vow CARVE AWAY 
EVER TTHING THAT 


DOESNT (20 
Litre A WEB 
DEVELOPMENT 
PLATFORM. 


Computerworld’s 
editorial director. Contact 
her at patricia_keefe@ 
computerworld.com. 


dustry issues and share advice and 
war stories. 

Finally, this week’s issue comes 
repackaged in a slightly smaller for- 
mat and features a new tool to better 
help you find stories and online information of 
interest. The more portable format is the first 
step in our ongoing plans to converge our print 
and online content to better serve your needs. As 
you leaf through this issue, you'll also notice 
some bar codes tucked here and there. We're de- 
ploying these CueCat bar codes to direct readers 
to value-added content online. 

We hope these new offerings will help you 
reach your own mission-critical goals. Let us 
know how else we can help. D 


NN 
PNY 
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PIMM FOX 


‘Telco Legislation 
Not Favorable to 
Il’ Managers 


HE MOST RECKLESS attempt by 

lawmakers to meddle in IT issues 

is the current effort by House En- 
ergy and Commerce Committee Chair- 
man W). “Billy” Tauzin (R-La.) and John 
Dingell (D-Mich.) to gut the 1996 Tele- 
communications Reform Act. 

Congress passed that law to spur new telecom- 
munications services and competition with the 
Baby Bells. It barred the Baby Bells from offering 
long-distance voice and 
data service until they 
proved that local markets 
were open to competitors. 
In addition, the law man- 
dated that Baby Bells offer 
competing companies dis- 
counted access to phone 
lines and equipment for 
new services. After all, the 
Baby Bells inherited the 
copper lines and switching 


PIMM FOX |S 
Computerworld's West 
Coast bureau chief. 
Contact him at pimm_fox@ 
computerworld.com. 


stations as a result of the 
AT&T breakup in 1984. 

After the 1996 law took effect, new companies, 
armed with an estimated $60 billion in investor 
money, were poised to offer alternatives for voice, 
data and Internet service. But reality has turned 
out differently. 

Upstart providers Viatel and Winstar have filed 
for Chapter ll bankruptcy protection. NorthPoint 
Communications has gone bust, Rhythms Net- 
Connections’ viability is in question, and Covad 
Communications has laid off 800 people and 
scaled back operations. The cost of gaining access 
to telco facilities and lines has wrecked their 


business models. 


And contrary to the spirit — and letter — of the 


| 1996 legislation, there’s little competition for local 


business or consumer service. The reasons are as 
complex as the legislation, but the remaining Bell 
companies — Verizon, SBC Communications, Bell- 
South and Qwest — have 90% of the local service 


| markets. And through their regional monopolies, 
| they also have some 70% of the high-speed market. 


The Baby Bells were supposed to grant com- 


| petitors access to their lines for the last mile of 


MOREONLINE For more Computerworld columnists and links to 


| archives of previous columns, head to www.computerworld.com/oped 
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connectivity. They also had to share networks for 
voice and DSL services. But most of the Bells de- 
layed broadband offerings, preferring instead to 
play hardball with competitors. 

DSL providers rent copper lines from the Bells 
to offer service. In some cases, phone companies 
charge a DSL competitor $20 a month for the 
same line for which they charge residential cus- 
tomers $12. In addition, DSL providers rent space 
at phone company facilities — typically a rack in 
a cage — at rates as high as $50,000 a month to 
house their equipment. The local phone compa- 
nies thwarted newcomers with tactics guaranteed 
to produce losses for competitors. 

The Tauzin-Dingell bill strips away injunctions 
that bar the Baby Bells from the long-distance 
data market while letting them prevent competi- 
tors from leasing or reselling services necessary 
for broadband deployment. 

If the bill (HR 1542) passes, IT operations will 
face higher bills as ISPs go the way of DSL pro- 
viders. Use what little bandwidth you have left to 
share your opinion; send e-mail to Dingel at public. 
dingel@mail.house.gov, or contact Tauzin via his 
Web site, at www.house.gov/tauzin/address.htm. D 


DAVID 
Latest Trends From 
IT’s Rank and File 


F YOU REALLY WANT to know 
what’s up with the IT workforce at 
the moment, go ask 24,000 IT work- 
ers. That’s what Foote Partners did from 
January through April, interviewing 
and surveying executives 
and employees from more 
than 1,500 companies. 

What’s up is that senior 
management is demanding 
a return on its sizable IT 
human capital investment. 

Here are a few key pre- 
liminary findings (more 
will come in future 
columns): 

Shock and disbelief persist. 
How could things have 
fallen so far, so fast? IT 
workers, whether they’ve 
lost a job, seen a project 
canceled, hold worthless 
stock options or are enter- 
taining premature thoughts about early retire- 
ment, remain stunned by the depth and swiftness 
of recent changes in the economy. They’re still 
coming to grips with the impact on their jobs and 
careers, but especially on dashed dreams of New 
Economy milk and honey. The shock is even more 


FOOTE 


DAVID FOOTE is managing 
partner and research di- 
rector at Foote Partners 
LLC, an IT workforce 
management research 
firm and organizational 
development consultancy 
in New Canaan, Conn. 
Contact him at 
dfoote@footepartners.com. 


| Aiding Spammers 


| mers merely provides the 
| spammer with confirma- 


| compiled into spam mail- 


| Show No Taste for Spam,” | 
| Computerworld.com, 

| April 30]. It’s a catch-22: 
| The more spam you de- 
| cline, the more mailing 


| receive. 





pronounced in tech meccas like Silicon Valley, 
where more fortunes were built. 
Clearly, those who have never worked through 


| a recession (Oops! I mean “economic downturn”) 
| are the most anxious. But many veteran man- 


agers, who boasted in our interviews about con- 
tingency plans they had drawn up well in advance 
to cope with economic turbulence in projects and 
staffing, admitted having difficulty executing 
their plans. While history may repeat itself, it’s 
just not the same in this labor market with this in- 
tense a mixture of complexity and competitive 
pressures and, arguably, so much more at stake. 
Salary increases are flat (but pay is up). Huh? Base 
salaries for about 90 IT positions we track were 
flat in the first quarter over the previous one. But 
variable pay (bonuses, incentives, skill premiums) 
rose an average of more than 3% of base salary, a 
huge rise for one quarter. The trend: IT workers 


| are being held more accountable for their impact 


instead of simply showing up for work. 
Expect to see more team- and project-based in- 


| centive pay as budgets undergo case-by-case 
scrutiny to focus resources on projects that bring 


short-term tangible benefits or immediate returns 
involving customer satisfaction. 

Red-hot market for skills. The market for various 
in-demand IT skills and certifications is electric. 


21 


Technical and project skills are increasingly being 


isolated and rewarded by employers to keep total 
compensation competitive in the face of stag 


base salaries and hard-nosed CFOs desperate to 
cut costs. While the laws of supply and demand 
routinely influence the relative values for skills 
bonus premiums, shrewd employers now make 


quarterly instead of annual adjustments to capital- 


] 


ize on constant market fluctuations. And employ- 
ers are being far more selective about doling out 
skills pay, especially for workers holding certifica- 
tions; they’re more inclined to save the big bucks 


for those who also have project or functional area 


experience and will be working on projects sure 


to deliver an acceptable return on investment. 
Strategic job-hopping. Talent may be flowing into 
the market from busted dot-coms, but the smart- 
est IT workers are leaving perfectly comfortable 
jobs for well-managed employers they surmise 
will survive the economic doldrums relatively un- 
scathed. In return, employers are asking job can- 
didates for greater commitment but also offering 


higher at-risk pay packages tied to performance, 


sometimes even measured over multiple years of 


service, similar to executive pay programs. 
The ante’s been upped for IT workers who 
choose to stick around. For managers and work- 


La ees 


Page One, April 16]. It 
gives enormous enforce- 
ment powers to the sec- 
retary of the Department 
of Health and Human 
Services. According to 
Sec. 164.506 (a)(1) of the 
regulation, if you don’t 
consent to your personal 
medical records being 
disclosed, your physician 
may refuse to give you 
medical care, or you may 
be denied coverage by a 
health-insurance plan. 
Bill Holmes 

| Carlsbad, Calif. 


Train Now, Not Later 


HY ARE our tax 
dollars being 
spent training 
| inmates [“Tech Training 
| for Inmates a Risky Un- 
dertaking,” News, April 
9]? I'd rather spend the 
federal medical- same money on pro- 
records privacy regula- grams for inner-city 
tion is really antiprivacy youths. Otherwise, think 
(“HIPAA Rules Go Into what happens: Kids with 
Effect Without Changes,” few or no options turn to 


EQUIRING recipi- 
ents to opt out of 
e-mail from spam- 


tion of a valid e-mail ad- 
dress, which can then be 


ing lists and sold to other 
spammers [“Senators 


lists you get placed on 
and the more spam you 


Marc J. Karun 
Norwalk, Conn 


Medical Shutout 


HE FEDERAL gov- 
ernment’s new 





crime, go to jail, then get 
the training they missed 
out on as kids. 


Ed Sanborn 


Andover, Mass 


Disabled and Willing 


ARY ANTHES’ col- 

umn “Keep the 

Disabled in Mind 
When Building Systems” 
[News Opinion, April 
30] was quite fortuitous 
in timing, since a visually 
impaired person is ap- 
plying to the law school, 
and we're considering 
how to meet the needs of 
visually impaired com- 
puter users. But I was 
disappointed that you in- 
cluded no references to 
useful resources. 
Keith J. Barton 
IT director 
Case Western Reserve 
University School of Law 
Cleveland 
Editor’s note: You'll find 
an abundance of re- 
sources by clicking the 


| ers alike, it’s time to get tough and look sharp. D 


link that accompanies 
this letter on our Web site, 
at www.computerworld. 
com/letters. 


NE-TENTH of 

males are at least 

partially color- 
blind, and software often 
uses subtle variations in 
color to communicate in- 
formation. Simply ad- 
justing the colors to 
more obvious, brighter 
ones would make a 
world of difference to us. 
Bruce Gomes 
Database administrator 
Monroe, N.Y 


COMPUTERWORLD welcomes 
comments from its readers. 
Letters will be edited for brevity 
and clarity. They should be ad- 


| dressed to Jamie Eckle, letters 


editor, Computerworld, PO Box 


| 9171, 500 Old Connecticut Path 
| Framingham, Mass. 01701 

| Fax: (508) 879-4843. Internet 

| letters@computerworld.com 

| Include an address and phone 

| number for immediate verification 
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PAN 


| DRAKI 
Users Must Revive 
PC Innovation 


INCE THE U.S. COURT of Appeals 

probably won't address the critical 
\_JZ issue in the Microsoft antitrust case 
— reviving software innovation — we 
software customers must do so. Unless we do, we 
won't get the innovations that can improve our 
productivity 

rhere certainly has been innovation on the In 
ternet and other platforms but not in the PC mar- 
ket. In 1998, Computerworld’s then-editor in chief, 
Paul Gillin, lamented: “The PC market has been 
stagnant as a platform for innovation for at least 
three years” [News Opinion, March 16, 1998]. He 
pointed out that innovation had shifted to other 
platforms: the Internet, 
wireless devices and ubiq- 
uitous computing. 

By using ideas from 
Netscape’s Navigator to 
create Internet I xplorer, 
Microsoft sent a clear 
message to third-party 
software developers: 
nish unis hokevex ile Any innovation on the PC 
software customers have 

unwittingly paralyzed 

oftware innovation and 
that they, not the courts 
are best able to revitalize 


t. Contact 


platform (having a large 
enough potential market) 
could become the basis 
for future Microsoft prod 
him at ucts. Unable to prosper in 
CddonsCintegrity.com that market, vendors inno- 
vated elsewhere. 

Che explosive growth of innovation on other 
platforms was partially created by those who 
avoided the PC market. These platforms will 
play important roles in the future of IT innova- 
tion. But unless we learn from what happened to 
innovation on the PC, we won't prevent it from 
happening to other platforms, nor will we revive 
it on the P¢ 

Che PC remains the best platform for many 
productivity-enabling applications and for the 
client side of many Internet and client/server ap- 
plications 
into the waters of PC software innovation, we will 


3ut until we make it safe to go back 


see only limited innovation there. 

While Microsoft’s actions ultimately led to the 
demise of PC software innovation, we software 
customers must accept responsibility for embrac- 
ing its strategies. Our acceptance eventually para- 
lyzed PC software innovation. That paralysis be- 
came so acute that PC sales declined enough that 
even Microsoft issued profit warnings. 

I have already suggested that software cus- 
tomers are partly to blame for the drought in PC 
innovation [News Opinion, June 5, 2000]. The 


NEWS 


best thing we can do to encourage productivity 
enabling innovations is to reward the original 
innovators and their investors. This may mean, 
for example, that we should reconsider adopting 
Microsoft's .Net platform. It may be a compre- 
hensive development environment with stronger 
storage management and object-oriented capabil 
ities and exception-handling facilities. 

But it wasn’t until after Sun rolled out Java with 
those same enhancements that Microsoft created 
-Net and C#, which combined are a potential Java 
competitor. To reward the original innovator, we 
would have to adopt Java instead of .Net. 

It would take courage to do that. In some ways, 
.Net is “Java done right.” Unlike Java, .Net pro- 
vides those same capabilities for its flagship C# 
language and many others. Microsoft worked 
with other developers so their languages would 
support these capabilities on .Net, too. We might 
encourage Sun to help developers of other pro- 
gramming languages generate code for Java 
virtual machines. 

This would require asking developers to do the 
same thing for Java that they already did for .Net 
But if we don’t do that, we'll tell potential innova- 
tors that in the end, we software customers will 
buy Microsoft’s version of their ideas but not 
their own. If we do that, innovators won't risk 
developing the productivity-enabling software 


we really want and need. B 


THORNTON MAY 


II; HR Can Be 
Better Partners 


T WASN’T SO LONG AGO that the 

ears of newly made, tech-aware 

senior executives were ringing with 
Chicken-Little-like laments predicting an 
apocalyptic IT skills short- 
age. Alarmists counseled 
executives to pay any 
price, bear any burden, 
hire any chef and fund 
every amenity to help 
make high-performance IT 
employees happy. The Sili- 
con Valley press was filled 
with stories of companies 
creating spa-like environ- 
ments to attract IT profes- 
sionals with the right stuff. 


THORNTON MAY is 
corporate futurist and 
chief awareness officer 
at Guardent Inc. in 
Waltham, Mass. Contact 
him at thornton.may@ 
guardent.com. 


Two cottage industries 
emerged: the “trackers” 
(recruiting firms that, for a 
handsome bounty, would ruthlessly target and 
solicit sought-after skills) and the “smackers” 
(firms that would design high-visibility lifestyle 


| 
| 
| 
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programs designed to kiss the butts of gold- 
collar employees). The primary focus of human 
resources departments appeared to have been in 
serving as the entry point for employees. 

But it appears that the days of Caligulan excess 
are over. Indeed, not only is the party over, but 
people are also being forcefully removed from 
the dance floor (that is, getting laid off). Many 
HR professionals, previously charged with find- 
ing high-skill employees, are now trying to get rid 
of them and having to be the bad guys where they 
once were good guys. 

I freely admit that some of my best friends are 
HR directors. They are much more than their 
perception as being gatekeepers to new employ- 
ees, rump kissers to the still-employed and 
bouncers to those on the way out. They serve the 
much-needed role of therapist, guide, cheer- 
leader, truth definer and role model/disciplinar- 
ian in our increasingly high-stress workplaces. 

I predict that the most valuable conversations 
taking place in organizations during the next five 
years will be those between IT, HR and market- 
ing. This is a radical departure from mainstream 
thinking. During the dark days of downsizing and 
IT pogroms that accompanied the economic 
downturn of the late 1970s and early ’80s, the one 
point of happiness for CIOs was that everyone in 
the organization hated HR more than they hated 
IT. IT professionals have indicated to me that 
while they wish for a better relationship with HR, 
they view it as part of the problem. 

In most organizations, the history of the inter- 
actions between HR and IT more closely resem- 
bles that of the Hatfields and the McCoys rather 
than the collaboration of Star Trek’s Mr. Spock 
and Dr. McCoy. IT leaders have a vested interest 
in working with HR. You can’t “give good IT” 
without good IT people, and you won't have 
affordable, good IT people if you don’t have a 
great working relationship with HR. It’s more 
than a source of skills. 

The sensitive management of customer infor- 
mation can only be accomplished by a full-body 
partnership between IT, HR and marketing. This 
is the heart and soul of the new enterprise. Indus- 
trial and individual customers have become in- 
creasingly sensitive to how their information is 
managed. Our tamper-resistant information sys- 
tems can only be as secure — and the customer 
information entrusted to us can only be as pri- 
vate — as our employees choose to make them. 

Observers of top-of-the-house executive be- 
haviors will tell you that HR professionals are 
rebelling against their historical ghettoization as 
gatekeepers or bouncers, depending on economic 
circumstance, and are rejecting the role of being 
litigation insulators and having to say, “Make sure 
we don’t get sued when we fire people.” 

HR is lobbying to play a key design role in cre- 
ating the culture of the increasingly unbounded 
organization. IT should support those efforts. D 
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DIVERSITY GAP 


IT has been slow to suc- 
cessfully incorporate 
minorities into its upper 
ranks, writes Theresa 
House. The problem, 
she argues, is that firms 
don’t take their own hir- 
ing policies seriously 
enough. » 32 


WEB CAR FIRMS 


JOIN FORCES 


Model E, which tried 
unsuccessfully to sell 
luxury build-to-order 
sport utility vehicles on 
the Web, merged earlier 
this month with another 
Web-based auto sales 
firm, in hopes that join- 
ing forces will be the 
key to success. » 31 


DOUBLE DUTY 


With so many intersec- 
tions between business 
and IT, more colleges 
are offering dual de- 
grees that combine tech- 
nical skills with busi- 
ness know-how. » 41 


PAYING THE PIPER 


An exclusive Computer- 
world study of manda- 
tory SEC documents 
from last year shows 
that only 46 of the For- 
tune 1,000 companies 
paid their CIOs on par 
with other senior corpo- 
rate officers. What does 
that say about how com- 
panies view the impor- 
tance of IT?» 42 
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WHICH WIRELESS 
APPS WILL WIN? 


IN A ROUNDTABLE DISCUSSION CO-SPONSORED BY COMPUTERWORLD, A PANEL OF EXPERTS 
weighs in on which wireless applications will succeed in business-to- 
business and business-to-consumer e-commerce. The group 


also discusses the key challenges organizations face in 
rolling out those applications and how companies can 
measure the return on their wireless investments. 
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Keynote: Ralph Szygenda, CIO at 
General Motors 

Going Digital the Old-Fashioned Way 
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Panel Discussion: Wireless Warriors 
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IT Leadership in a Changing Economy 


Panel Discussion: Heavy Hand of 
Uncle Sam in Online & 
Security and Privacy Protection 


The U.S. government has new regulations or Doug Busch, 
proposed legislation wherever technology CIO. Intel 
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touches ens. Concerns about data 
privacy further politicize these areas where IT can clearly be held 
ble. The high-tech sector remains split about how to approach 
nline privacy guarantees in the U.S., while the European Union has 
already adopted tough data protection laws. What will these diverging 
ets of international privacy laws mean for your company? On the flip- 
side of privacy is security. What role should government play in helping 
companies protect their systems? What are your concerns about 
government involvement? We'll discuss strategies for keeping ahead of 
Uncle Sam in this regulatory environment 


Panel Discussion: The New ROI: Tracking Technology 
Payback in a Tough Economy 

The build-out of e-business is ongoing, but the pace has slowed with the 
downturn of dot-com fortunes. But the intersection of IT and business is 
still a very busy place. Now is the time to recession-proof your IT 
organization, generate new ideas and find new revenue streams. How is 
your company using the Internet to streamline processes within the 
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business opportunities and ROI behind technology expenditures is this 
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Online Automakers Look for Boost From Merger 


BTO to sell Web-based 
build-to-order cars 


BY LEE COPELAND GLADWIN 
ODEL E CORP. a dot- 
com that tried unsuc- 
cessfully to sell build- 
to-order cars via the 
Internet, took a second 

shot at success this month and merged 

with a Santa Monica, Calif.-based start- 
up that devised outsourced vehicle pro- 
duction plans. 

Model E and Flint Inc. will merge 
into a single company with the tempo- 
rary name of Build-To-Order Inc. (BTO). 
By 2004, Fremont, Calif.-based BTO 
plans to offer a line of custom-built ve- 
hicles that will cost about $35,000, al- 
though officials said they hope to out- 
source production to other automakers 
with excess manufacturing capacity. 

“The odds of this company’s success 
are slim, but there are some things that 
it has to work with,” said Jonathan Gaw, 
an analyst at IDC in Framingham, Mass. 
For example, Gaw said, BTO has the ad- 
vantage of not having a dealer network, 
which typically adds 15% to 20% to the 
price of a car. 

But Gaw cited other barriers that 
BTO will have to surmount, such as the 
high cost of establishing a brand. 

When Model E launched its build-to- 
order Ironman luxury sports utility ve- 


hicle in November, it drew praise from 
analysts for ushering in a Web-based 
approach to developing custom-built 
cars before the established automakers 
did. But there was skepticism about the 
prospects for a vehicle with a starting 
price of $100,000. And BTO officials ac- 
knowledged this week that Model f 
never produced any of the cars. 

Scott Painter, founder of Flint and 
chairman of BTO, said the merged com- 
pany won't face the high costs of build- 
ing a national brand. Instead, BTO 
plans to use the Web as its primary ad- 
vertising vehicle and focus on a smaller 
audience of tech-savvy individuals. 
Production of the cars will be 
sourced to other automakers, thereby 
eliminating the need for manufacturing 


out- 


facilities, he added. 

“We're not looking to build a national 
brand on par with Volkswagen,” said 
Painter. “Our break-even point is so low 


New Dealer in Town 


Build-To-Order, the company formed 
by the merger of online start-ups Mod- 
el E and Flint Inc., plans to offer vehi- 
cles developed using computer-aided 
design technology. Those vehicles will: 


= Be custom-ordered online 
=Cost about $35,000 
=Be available by 2004 





ASP Reveals 
Visitor Habits 


BY MARK HALL 
Keeping an accurate tally of Web site 
traffic remains elusive, but marketing- 
driven companies are adopting tools to 
improve their precision in counting 
who's visiting, where they go and, most 
important, what they buy. 

Last week, Hanover Direct Inc. rolled 
out two more online businesses that 
use eLuminate, a Web-traffic analytic 
service from application service pro- 
vider Coremetrics Inc. in San Francis- 
co. The $600 million catalog and online 
retailer now operates nine Web sites 
with the eLuminate service, which 
gathers aggregate statistics “on every- 
thing from clicks to lifetime value of the 
customer,” according to Hanover Di- 





rect’s Internet marketing 
Jonathan Kapplow. 

An overriding issue for Weehawken, 
NJ.-based Hanover Direct is privacy, 
said Guy Creese, an analyst at Ab- 
erdeen Group Inc. in Boston. 

One reason why Hanover Direct 
chose Coremetrics is because it strips 
away individually identifiable informa- 
tion before Kapplow’s staff analyzes the 
numbers for marketing research. 

Minesh Shah, a marketing manager at 
Brisbane, Calif.-based Walmart.com 
Inc., said he chose it for similar reasons. 
Walmart.com is owned by Bentonville, 
Ark.-based Wal-Mart Stores Inc., Palo 
Alto, Calif.-based Accel Partners, and 
other investors. 

“We evaluate this information in ag- 
gregate, rather than look at individuals’ 
shopping habits,” he said. “Further, our 
Coremetrics implementation is anony- 
mous, so none of our customers’ per- 
sonally identifiable information is 
shared.” D 


manager, 





that’s its not a difficult hurdle to cross.” 

Many of the details surrounding the 
planned merger of Model E and Flint 
still need to be finalized. In addition to 


settling on a permanent name, the 
panies still need to secure addition 
nancing, recruit new executives 
name a board of directors. William San 


tana Li, founder and former CEO 


Model E Corp., was tapped to be the 


CEO of the merged company. D 
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Equal IT Hiring a Must 


NFORMATION TECHNOLOGY has traditionally been slow to success- 
fully incorporate minorities into its upper ranks. Has IT really looked 


into their potential? To address this, a company must look at what it ex- 


pects from its IT resources. 
Typically, IT people are recruited because of their technical abilities. And 
IT employees who are minorities remain in the same positions for many 
years after their nonminority peers have been promoted and continue to be 
promoted. Though there are exceptions, the overall percentages of minorities 


in IT and the upper IT ranks 
haven't increased over the 
years. Other industries are 
just more serious when it 
comes to workplace diversity. 


To understand why IT 


isn’t successfully incorporat- 


ing minorities into its execu- 


tive ranks, we need to fully 
understand who’s making 
the hiring decisions and who 
conducts the interviews 

A November survey of 
job-seeking minority IT pro- 
fessionals that was conduct- 
ed by a national African- 


American organization 
found that people conduct- 
ing interviews really have 
little in common with mi- 
nority job seekers and are 
more likely to hire people 
with whom feel they have 
the most in common. 


Call 1-800-OK-CANON ext. 50 or visit www.imagerunner.com 


Take this hypothetical ex 
ample: Human resources 
sends a group of résumés to 
Lance, a hiring manager. 
Some of the names are cul 
turally different 
from Lance’s. 
Even though 
their credentials 
are outstanding, 
if Lance isn’t 
forced to inter- 
view these peo- 
ple, chances are 
good that human 
resources won't 
receive a request 
from Lance to 
prescreen them. 

Let’s say, for in- 
stance, the names 
don’t give away the appli- 
cants’ cultural identities, 
and Lance asks to speak 


THERESA HOUSE has spent | 
more than 20 years in IT } 
work, from technical posi- 
tions to management. | 
You can contact her at 
theresa house@yahoo.com. | 
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with or meet Jasmine, who 
has the most impressive ré- 
sumé, and Richie, who bare- 
ly meets the job qualifica- 
tions. What happens when 
one of the candi- 
dates turns out to 
be someone of a 
different cultural 
or ethnic group? 
Jasmine goes 
in for an inter- 
view with Lance. 
She’s dressed in 
khakis and a polo 
shirt; her hair is 
in cornrows. 
Lance finds Jas 
mine’s creden- 
tials and experi- 
ence impeccable. 
Jasmine smiles frequently 
during the interview and 
asks about the environment 


A box that delivers 
paper documents 
anywhere overnight? 


introducing the Canon imageRUNNER with document distribution technology. Now you can send 
paper documents anywhere, in any form, at anytime, right over your network or the internet. Instantaneously. Simply 
scan a document into the imageRUNNER 5000, and you can send it to any desktop, e-mail address, fax machine, database 
or file server. And since the Canon imageRUNNER is capable of integrating directly with your existing e-mail, lanfax, 


* Requires additional software which is soid separately. Speak to your authorized Canon dealer. 
Canon is a registered trademark and IMAGERUNNER and Canon Know How are trademarks of Canon inc. IMAGEANYWARE is a service mark of Canon U.S.A., inc. ©2001 Canon U.S.A., inc. 
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and development workflow 
processes. She’s articulate, 
and her questions and an- 
swers relate to what she can 
bring to the job. 

But Lance doesn’t see Jas- 
mine as being a good fit for 
the team on which she would 
work; they don’t make a con- 
nection. Lance doesn’t relate 
to Jasmine and feels uncom- 
fortable speaking with her. 

An hour later, Richie, 
whose outward appearance 
is very similar to Lance’s 
comes to the interview 
wearing khakis and a polo 
shirt. He immediately asks 
about development tools, 
then he and Lance strike up 
a conversation about last 
night’s hockey game. Richie 
is referred to Lance’s boss 


for a second interview; Jas- 


mine isn’t called back. Who 
gets the job offer, and why? 

Lance isn’t aware that he’s 
not conforming to his com- 
pany’s policy of hiring the 
best-qualified person who 
has the most experience and 
who can bring the most to 
the team. In his mind, he’s 
choosing the most qualified 
candidate. He may recom- 
mend Jasmine to another 
group because of her cre- 
dentials. But what’s wrong 
with this picture? 

Though many companies 
blow their own horns about 
their diversity programs and 
don’t base their hiring prac- 
tices on color, religion or 
sexual orientation, these 
policies are not being imple- 
mented at the hiring level 
and definitely are not sup- 


Or a box that 
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How do 
we better 
hire, retain 
and promote 
minorities? 


ported through internal 
advancement. 

Worse still is the fact that 
corporate expectations aren’t 
being met where diversity 
is concerned. Human re- 
sources will find qualified 
candidates and refer them to 
the hiring managers. But the 
people doing the hiring will 


typically hire the people 
they believe will “fit in” 
best in IT. 

How do we better hire, 
retain and promote minor- 
ities? 

Good managers, regard 
less of their personal views, 
should hire and promote 
the most qualified people. 
But more important, com- 
panies should begin to look 
closely at the number of 
minorities who are inter- 
viewed and not hired and 
then find ways to educate 
their managers on cultural 
sensitivity and compliance 
with company policy. 

Hiring managers should 
look beyond what’s apparent 
in a candidate and really 
find out what makes him 
tick. After all, if he passes 


the prescreenin 

it into the man 
for an interview, 
be some serious ir 
the candidate. 

Also, managers must 
velop their subordinates 
personal skills in relating to 
minorities, if they want to 
keep and promote everyon 

Good managers mat 
people according to their 
companies’ expectations 
not their own. Until every- 
one’s expectations are met 
and managed, IT will con 
tinue to operate on its pre- 
sent course and minorities 
will continue to be left 
behind. D 
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Keeping Track of Customer Data 
A Challenge After Merger at Peco 


interviewee: K 


Company: 


Main location: f 
No. of IT employees: 6£ 


No. of employees (end 
users): 2,7 

What impact has the 
merger had on IT? 


A 


IT career paths: “W 


“What it’s Like 
To Work at... 


ning and 
accounts rece 
S installing a 
emer t SVS 
n ComEd 
wi dl evaluate | ry to lever 
age that solution in Chicago.” 
Other major initiatives: “A 
new browser-based front end 
for our customer information 
system, to make the call center 
more efficient; a customer data 
warehouse comprising different 
data marts that will help stream- 
line our reporting processes: 
and, in concert with the rest of 
Exelon, we're migrating the data 
center from Lexington, Ky., to 
Joliet, lil.” 
IT training: “Some soft skills 


Workday: 


the th 
f 


), 6:30 5 


Must people carry a. 
ers? Cell phones? At 


phones 
Is a security badge or card 
needed to get into building 
or office? Yes 

Workspace: “We're in the 
midst of moving to a higher 
floor - our goal is for all of IT to 
be together, and we talked 
about whether we wanted to 
have a lounge area with com 
fortable chairs and toys, but 
employees said they didn’t need 
that. Instead, we revamped the 
kitchen area so it’s more con- 


: ducive to conversation.” 


On-site amenities: A fitness 


: Center 

: Last companywide/depart- 
: ment perk: Free tickets to the 
: Penn Relays, an annual track 

: and field event at the University 


of Pennsylvania 
- Leslie Jaye Goff 
(jgoff@ix.netcom.com) 
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Key Shift for IT 


JERE’S AN IMMENSE SHIFT UNDER WAY in the re- 
saudiliilisies of effective IT organizations. Historically, 


their sphere of concern was managing technology: ex- 
penditures, development, operations and support. Now, 


about five years into the e-commerce era, the 


main is- 


sues IT must increasingly address are the impacts of technology. 


rhe Internet, PCs, e-commerce and mobile 


commerce have accelerated the shift of technol 
ogy from the periphery to the center of more 
areas of business, society and everyday life 
Here are just four areas that will need new IT 
expertise, experience and education: energy 
and conservation, privacy, taxation, and con 
sumer protection. This list may seem surpris 
a way, it reflects how successful IT, 


e-commerce and the computer and telec 


but in 


nications industries have been in helping turn 
the academic network infrastructure of the old 
Internet into a force that’s at the center of the 
most far-reaching, progressive changes in our 
world today and into tomorrow 

IT’s impacts go well beyond the management 
of technology now; my list adds up to an essen 
tial extension of its skill and responsibility base. 

Che following 
Energy and conservation. 
cal energy consumption in the U.S. is for IT op 


are reasons why: 
About 12% of all electri- 
erations. In some ways, the corollary to Moore's 
Law (that hardware price-performance doubles 
every 18 months) is that demands for air condi- 
tioning, which helps cool data centers, and 
managing that energy, increases 

faster than energy supply, if not pro- 

Add the s 
lems of disposal of batte ries, obso- 


portionately. A growing prob- 
lete equipment and print cartridges, 
and it’s clear that IT will increasing- 
ly need to take energy and conserva- 
tion into account in its planning and 
operations. 

Privacy. This is becoming a growing 
concern, and it’s climbing political 
and legislative agendas across the 
world. There has always been a ten- 
sion between convenience and pri- 
vacy, between access and control, 
and between personal service and 
anonymity in any telecommunica- 
tions-dependent service. E-com- 
merce has increased that tension. 
Mobile commerce will increase it 
even more because of FCC regula- 


PETER 6.W. KEEN is chairman 
of Keen Innovations 
(formerly The international 
Center for information 
Technologies) in Fairfax 
Station, Va.; a senior fellow 
of Differentis, a European 
business-to-business consul- 
tancy; and a distinguished 
visiting professor at the 
University of Delft in the 
Netherlands. Contact him at 
peter@peterkeen.com. 


tions and business applications that track the 
locations of subscribers. Any IT professional 
must become knowledgeable about privacy in 
terms of technology issues, best practices and 
the law 
Taxation. Within the next three years, taxation 
will be a key IT planning issue. In the U.S., the 
issues will center on legislation, state and local 
taxes vs. federal taxes, and collection. Interna- 
tionally, a trade war is coming. The huge inter- 
national imbalance in e-commerce purchases 
means more goods and services will be sold out 
of the U.S. Europe wants to collect a value- 
added tax of, typically, 18% at the buyer’s end. 
rhe U.S. will favor collection of a 5% to 10% 
sales tax at the seller's end. So, expect the next 
massive and complex software investments to 
center on tax collection. 
Consumer protection. There are few precedents, 
established practices and laws to cover online 
business. There are growing reports of cus- 
tomers having problems resolving, for instance, 
the blocking of “opt-out” marketing procedures. 
In these situations, they’re automatically billed 
for renewing a service unless they explicitly opt 
out in writing. But they can’t get 
their letters to the people who can 
process the cancellations, and they 
can’t get redress on incorrect 
charges or dispute transactions. In 
many cases, the troubles are caused 
by IT system design problems and 
poor handling of the business 
processes behind the system 

IT will thrive or fail during the 
next few years on the diversity of 
its roles and responsibilities — and 
of its people and their skills. Diver- 
sity and creativity go together. The 
IT organization that doesn’t take on 
these four issues as responsibilities 
is implicitly deciding to confine it- 
self to too narrow a role to be cen- 
tral in managing technology’s im- 
pacts, rather than just managing 
technology. D 
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Can't handle another byte? Store Smarter.” 


Introducing Active Archive Solutions: The intelligent way to optimize database performance. 
Active archiving is a breakthrough way to relieve the pain of overloaded databases, sluggish 


application performance and endless hardware upgrades. Database size is dramatically reduced 
by systematically setting aside infrequently used data. However, the data is always kept close at 


hand for easy access. Best of all, you save money by optimizing the hardware you already 
have. Get smarter. Call 800-457-7060 or visit www.storesmarter.com. 
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ROUNDTABLE PARTICIPANTS, FROM LEFT: 

Dan Glessner, director of enterprise marketing at Palm Inc 

in Santa Clara, Calif.; David Lambert, telecommunications 
analyst at National Bank Financial in Toronto; John Distefano, 
vice president and practice director for the mobile commerce 
and wireless services practice at Cap Gemini Ernst & Young U.S. 
LLC in St. Louis; Dan Black, director of e-commerce systems at 
United NetWorks, a wholly owned subsidiary of United Air Lines 
Inc. in Chicago; and Tracey A. Esherick, executive vice presi- 
dent of online brokerage at Fidelity Investments in Boston. 
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Forget the hype. Which B2B and B2C mobile-commerce 
applications are really expected to succeed in the fu- 
ture? Experts weigh in on these and other wireless chal- 
lenges facing corporate America in the latest chapter of 
Computerworldand ebizChronicle.com’s roundtable 
series. By Thomas Hoffman and Sarwar A. Kashmeri 


ong before the dot- 
com bust, before the 
bull market ran back 
into the barn, just 
about everybody 
was predicting that 
wireless was going 
to be the next hot 
technology. And 
while some of the enthusiasm for mobile 
business has cooled a bit as companies 
have reined in their IT spending, many 
experts continue to believe that this 
arena is still in its infancy and that the 
commercial potential for wireless com- 
puting remains huge. 

As part of an ongoing series of round- 
table discussions co-hosted by Comput- 
erworld and ebizChronicle.com, a 
group of IT executives recently got to- 
gether in New York to discuss wireless 
issues such as privacy and security chal- 
lenges and geographic disparities. 


Hoffman: Which appear to be the long- 
term winners for mobile-commerce 
applications? Are there any killer apps 
out there? 

Glessner: A lot of our customers are 
using handhelds for horizontal appli- 
cations like mobile office, which is 
e-mail, calendaring and scheduling. A 
second broad horizontal is in the area 
of CRM — customer relationship man- 
agement — to provide better customer 
service and grow top-line revenues. 
Esherick: One of the things that pre- 
vents consumers from participating 
more here is that it’s too tough to fig- 
ure out which device to buy. I know; I 
have three [a PalmPilot, a Research In 
Motion pager and a cell phone]. 

I think the killer app is fixing that 
problem, making it much easier for peo- 
ple to select the device that makes sense 
for them. And consumers shouldn’t 
have to know the difference between 
Web and WAP [Wireless Application 
Protocol]. 

Black: M-business isn’t always about us- 
ing a wireless device for financial trans- 


| 
| 


actions. It can include business efficien 
cies, such as the use of these technolo- 
gies by a ground crew for an airline. 
Distefano: I think trying to figure out 
what the killer app is is a bit of a scav- 
enger hunt. There are a lot of work- 
place-type apps that are a good fit for 
untethered field workers. It’s the abili- 
ty to give real-time information in a 
sales situation. If I’m a maintenance 
engineer, if I’m a field service rep, [it’s] 
the degree that I can know right then 
at the point of repair what 
the part history is, what 
kinds of maintenance have 
been performed on this de- 
vice — whether it’s an air- 
plane or it’s an expensive piece of 
medical equipment. 

Lambert: One segment that we haven't 
looked at here is the device-to-device 
[market]. I think that’s going to be an 
important part of the wireless sector. 
For example, this is a really simple 
app: a location-based security system, 
where you stick a little device in the 
car and a [security] company can track 
that car and get insurance companies 
to pay them for doing the tracking of 
stolen cars. 


ROI 


Kashmeri: Is it possible to apply his- 
torical return-on-investment criteria 
against wireless investments? Should 
companies factor in these huge third- 
generation licensing costs? 

Esherick: Overall, we view this as part 


of doing business. And while it’s a new, 


leading channel now, I think it’s going 
to eventually be just like 800-number 
service was; it’s going to be a cost of 
doing business. 

The reason we're in this space is 
customer service. Ideally, this will al- 
low us to serve our customers better. 


MOREONLINE 


For a full transcript of our roundtable discussion of 
wireless technology, visit our Web site 
www.computerworld.com/wireless 


When you talk to customers who are 
actively using these devices today, they 
love them — they absolutely love 
them. It gives them freedom, and it al- 
lows them to keep on top of things, 
and they’re easy to use. [Wireless tech- 
nology is] still not where we’d all like it 
to be, but it’s a heck of a lot easier to 
use these than it is to log on to the PC 
sometimes. 

Lambert: I cover one of the companies 
that was bidding on the U.K. wireless 
spectrum and won one of 
the licenses. And some of 
the reasons they gave me for 
paying so much for their li- 
cense were that there are ca- 
pacity constraints for voice [and] that 
it was a strategic move, because if you 
think you’re eventually going to have 
voice over IP in the wireless segment, 
then new networks will be more effi- 
cient than the old networks. And 
you're capable of paying more for the 
spectrum if you’re able to put ina 
more efficient network. 

Glessner: Do historical ROI analyses 
apply to these multibillion-dollar in- 
vestments? From my perspective, the 
answer is absolutely yes. And Old 
Economy rules apply to this New Econ- 
omy kind of situation, and the stock 
market has been bearing that out. 
Distefano: On the topic of the hundreds 
of billions of dollars that have been 
spent [on spread-spectrum licenses], I 
struggle with that. Right now, it’s not 
necessarily an enviable position, but I 
guess these guys are a lot smarter 
about exactly where this market may 
be going than I might be. This is not an 
investment that should be measured or 
evaluated within a three- to five-year 
horizon. This is a 10-, 15-, even 50-year 
investment that they’re making. 

Black: The ROI is not black and white. 
Qualities like customer retention are 
more measurable by surveys than they 


| are measured by financial execution 


transactions. 
Wireless Wilderness, page 40 


The Moderators 


Sarwar A. Kash- 
meri is publisher of 
ebizChronicle.com, 
a New York-based 
online daily news- 
paper covering 
business-to-busi- 
ness e-commerce. 


Thomas Hoffman is 
Computerworld’s 

' business features 

» editor. 





THE BOOK OF @ BUSINESS 


Nothing says “together forever” like a 


tightly integrated e-business infrastructure. 


* LEGAL NOTE: (BM, the e-business logo and other marks designated “ or ™ are trademarks of International Business Machines Corporation in the United States 





THE SWEET, 


© business infrastructure 


MIDDLEWARE: 


THE GOOD STUFF is always in the 


middle. Think candy bars. Or jelly donuts. 
Or Blow Pops: Or Web applic ation 
environments based on open standards 
that give you socketlike developme nt 
simplicity, killer tools and a realistic way 
to cut custom coding time by as much 
as 80%. Good stuff, indeed. Technically 
speaking, it’s nothing short of yummy 

Every month thousands of copies of 
WebSphere® software are downloaded from 
ibm.com. The buzz you hear is real. Over 
35.000 companies are using it now in 
hundreds of ways. making it the fastest- 
growing Web software platform. 

Why IBM? Because IBM has been 
integrating end-to-end e-business systems 
for decades. From the simple to the 
staggeringly huge and complex. So we build 


software with that experience. Software 


VOUGATY CENTER OF INFRASTRUCTURE. 


like MOSeries? which lets you remain 
calm when some half-informed executive 
commits to “integrating” your brand-new 
Web-based supply-chain system with your 
new supplier's 12-year-old mainframe- 
based distribution system (or any of 35 
other incompatible platforms). Or IBM's 
livoli® software. relied upon by 96 of the 
Global 100 companies to securely control 
and manage their e-business networks. Or 
DB2? the hub of any robust e-business. 
delivering up to twice the performance ol 
Oracle’8i at half the price. Tasty, eh? 

Middleware from IBM. It’s the digital 
gearbox at the sticky center of integrated 
e-business infrastructure. 

To talk to someone about how IBM 
middleware can help your enterprise, call 
us at 800 426 7080 (ask for infrastructure) 


or go to ibm.com/e-business 


2001 IBM Corporation. All rights reserved. 


and/or other countries. Other company, product and service names may be trademarks or service marks of others. 
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EXPLORING THE 


WIRELESS 
WILDERNESS 


Market Successes 
Hoffman: What are some concrete exam 
I | ce SUCCESSES, Cl 

)-business or busi 

nes u 

Lambert: There’s a company in Canada 

called Grox nd they’re 

basically a gro service 


wnere pre ttv soon, you're going to De 


able to order your groceries over wire 
less devices. So while you’re in your 


u're going to say, “OK, I need 


car, y¢ 
some milk and butter,” and then us¢ 
your wireless device to order them 
Glessner: Safeway in the United K 
dom is g powered hz 
j 


held device ‘ir customers, with 
gnets on the back of them to 
refrigerators. As people g« 
nge juice carton or the 
n, they just tick off [that 
» MinuteMaid or what 


\nd this gets trans 


milk ¢ 
they'd] lik 
ever the b 10 1S. 
mitted wirelessly to the Safeway store. 
Am I more likely to stop off at Safeway 
to pick up the groceries that they know 
that I want, or would I stop off some- 
where else to buy food on the way 
home? Safeway’s bet, of course, is that 
this is a great cus- 
tomer-retention 
opportunity 
Fiat in France 
is using hand- 
helds to auto- 
mate and im- 
A prove the whole 
f for cars. And we 
all know how 
pleasant that is. 
But they’re ba- 
sically trying 
to provide the 
salespeople with all the 
information about promo- 
tions and financing and op- 
tions, so they never have to 
leave the customer for any 
period of time and they can 
always answer all their 


e 


buying process 


questions. 
On the B2B side, The At- 


lanta Journal-Constitution uses hand 
helds to automate the newspaper deliv 
ery process, where drivers touch the 
screen and see that they need to deliver 
the morning newspaper to the second 
house on the left, touch it again, drive 
two blocks, make a right turn, deliver 
the evening newspaper to the third 
house on the right. 

Distefano: One good example is one of 
the largest trucking and transportation 
companies in the U.K. They looked at 
their operations and realized that 
they’ve got somewhere between 20% 
ind 28% of their vehicles on the back 
haul [from a delivery] that come back 
empty. They said, “How can we take 
advantage of that excess capacity?” 

So what they've done is basically 
create a marketplace that allows ship 
pers [to] bid on the ability to move that 
gear. So if there’s a two-pallet load in 
Manchester that needs to be moved to 
London, I’ve got two empty trucks 
there that just emptied out this morn- 
ng. As a carrier, I can take what would 
1ave been unused excess capacity that 
was just going to make this drive back 
to London totally empty, bid on that 
deal, get it within minutes because it’s 


i 
1 
I 


a real-time auction, load up the gear 
and drive it back. 


Key Challenges 

Kashmeri: What are the key challenges 
organizations face in rolling out mobile- 
commerce applications? Privacy and 
security issues? Skills shortages? 
Esherick: One of the biggest challenges 
is that I’m not sure we're thinking big 
enough, speaking for Fidelity. I think 
that there are so many possibilities 
with some of the new technology that 
even the experts can’t envision how it 
can make people’s lives easier. So I 
think one of our challenges is to be 
thinking far enough out so that we can 
really get to the killer app or get to that 
next service or next revenue stream or 
whatever it is. 

Glessner: One of the big challenges 
companies are facing is how they cost- 
justify a lot of these wireless invest- 
ments. Enterprises are struggling with 
that and so they are obviously just 


COMPUTERWORLD May 14, 2001 


One of the 

big challenges 

companies are facing 
is how they cost- 

justify a lot of these 
wireless investments 

Enterprises are 
struggling with that. 


DANIEL GLESSNER, DIRECTOR OF 
ENTERPRISE MARKETING, PALM INC. 


looking to begin with the highest-ROI 
projects. There are a lot of converging 
technologies as well. So having sys- 
tems integration capabilities is very 
important. There’s also a multitude of 
devices right now: cell phones, WAP 
phones, handhelds, laptops. So enter- 
prises are struggling with “How do I 
support, how do I manage, how do I 
get out this enterprise information to a 
multitude of devices? And how do I do 
it securely?” 

Distefano: Another big challenge is that 
the life cycle of new technology is now 
less than the life cycle of delivery. So 

we start a six-month project, [and] 
there’s a new device. Are we outmoded 
as soon as we launch? That’s extreme, 
but still, there’s an issue there — there’s 
a challenge there that we have to think 
about from a technology and infra- 
structure perspective. 

Black: How does this compare to other 
business priorities? The Internet is the 
bread and butter right now. How much 
time and energy do you put into this 
wireless stuff that’s really on the edge 
of adoption? You've got to put some 
effort into it, because you don’t want 
to be left behind. But at the end of the 
day, where’s your bread and butter? It’s 
not here. My point is, where do you 
draw the line? B 


This roundtable was a joint effort of 
Computerworld and ebizChronicle.- 
com, an online daily newspaper covering 
business-to-business e-commerce. 
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BUSINESS 


In Search of II's 
Dual Degrees 


MBA program with a heavy dose of technology - have risen 
to the very top of many recruiters’ wish lists. By Jill Vitiello 


FRANK SKINNER put his career on hold to go back to school to learn 
how to combine business understanding with technology know-how. 


HAT’S BETTER 
than an MBA? A 
so-called techno- 
MBA: 


mation systems or e-commerce, 
or even dual degrees that yield 
two distinct diplomas — an 
MBA and a master of science in 
IT — upon graduation. 


“The CEOs and hiring man- | 


agers we've interviewed tell us 
they would kill for this kind of 
MBA talent,” says Louis E. 
Lataif, dean of Boston Univer- 
sity’s (BU) School of Manage- 
ment. BU will admit its first 
class of 100 full-time MS/MBA 
students in September. 
According to Lataif, in the 
1960s, only about 4,000 stu- 


| 105,000 students in the 
an MBA | 
with a concentration in infor- 





aid 


dents graduated from business 
schools each year. Last year, 
U.S. 
earned MBAs. 

Michelle Guldalian, a senior 
analyst in the IT services 
group for the city of Philadel- 
phia, will complete her MBA 
with a concentration in MIS 
this spring. She began the pro- 
gram at Temple University in 


Philadelphia in 1997, attending | 


part time at night and paying 
the tuition herself. 

With that kind of motiva- 
tion, she will likely meet her 
next career goal of working as 
an IT consultant at one of the 
major consulting firms. 

“Temple gave us a lot of 
practical application,” says 


| Guldalian. 


| e-business 





“We 


projects in cross-functional 


| groups, just like we do in the | 
| tained loans, lived frugally and 


real world.” 


Temple recently revamped | 


its graduate school programs 
to meet the needs of a student 
population that’s increasingly 
interested 
business studies. 
MBA with either an MIS or 
concentration, or 
a master of science in e-bus- 


iness, which is a post-MBA | 


Full-time students 
MS/MBA in 


program. 
can pursue an 
e-business. 


Competitive Edge 

Last September, Frank Rey- 
nolds, who already has an 
MBA and a master of science 


degree in psychology, began | 
| earning his master’s degree in | 
| e-commerce at Temple. 


“I need to get the competi- 
tive edge over my peers,” says 


| Reynolds, a document produc- 


tion marketing executive at 


Xerox Corp. in Philadelphia. | 
the fore- | 


“E-commerce is at 
front for the business decision- 
makers of the future.” 


In addition to working full | 


time and studying part time at 
Temple, Reynolds and several 


of his fellow students formed | 
an e-commerce think tank that | 


hosts a Web site and does pro 
bono project work. 

But Reynolds’ model isn’t 
the only one available for am- 
bitious IT professionals who 
want to speed their climb to 
the senior ranks with a dual- 
edged degree. 

Frank Skinner was em- 


worked on 


in adding profi- | 
ciency in IT to traditional | 
Part-time | 
students can now choose an | 


ployed for several years at a 


| company where he was re- 
sponsible for integrating man- 


ual processes with informa- 
tion-tracking systems. 


“I saw that workflow issues | 
| were just part of a larger prob- 
| lem with business in general,” 
| says Skinner. “I wanted a solid 
foundation in effective IT im- | 


plementation so I could deliver 
proper solutions to clients.” 

He left his job and entered 
the demanding full-time MIS 
MBA program at the Universi- 


| ty of Alabama in Tuscaloosa. 


To survive the temporary loss 
of income, Skinner banked 
sales commissions while he 
was still working. While en- 
rolled in the program, he ob- 


worked on campus. 
Most important, Skinner had 
the support of his wife, Kim, 


| who was willing to work full 


time while her husband attend- 
ed school. A paid summer in- 
ternship at Memphis-based 
FedEx Corp. helped ease the fi- 
nancial burden. 


Return on Investment 

The career time-out paid off. 
In December, Skinner was of- 
fered a job by Chicago-based 
Andersen’s 
ing group. He starts work in 
Charlotte, N.C., upon gradua- 
tion this spring. 

“Based on what I 
learned and experienced here, 
I have set a course to make a 
real impact for my clients,” 
says Skinner. “I see my career 
progressing to the level of part- 
ner or CIO.” 

Challenging work, a dynam- 
ic culture and executive edu- 
cation opportunities at An- 
dersen attracted Skinner to 
the company. 

“Every time you achieve a 
promotion, there’s a training 
program to help you get in- 
grained in the skill sets you'll 
need to take on the new re- 
sponsibilities,” Skinner 
He’s already looking forward 


business consult- 


have 


says. 


to continuing his professional | 
development at Andersen, he | 
says, with company courses in | 


project management, client re- 
lationships and leadership. D 


Vitiello is a freelance writer in 
East Brunswick, N_J. 


Dual-Degree 
Sampling 


The following schools 
offer techno-MBAs: 


Carnegie Melion 
University 

Pittsburgh-based Carnegie Mel- 
lon’s renowned computer science 
school grew out of its business 
school, which was the first to have 
a computer. The ties between the 
two schools are still strong. 

“Last year, we added a con- 
centration in e-commerce to our 
MBA program, and in one year, it 
became the second most popu 
lar,” says Fallaw Sowell, deputy 
dean and director of the MBA 
program. “The first is finance; the 
third is strategy, which had been 
No. 2 for the past few years.” 


Boston University 
BU’s MS/MBA program is built 
on the school's past success with 
dual-degree programs. Its MIS 
MBA, which was structured for 
future ClOs and chief technology 
officers, will no longer be offered 
“The MS/MBA is designed for 
the highest-aspiring MBA who in 
tends to be a leader and make an 
impact on society,” says School 
of Management dean Louis Lataif 
“They need more than a general 
MBA can offer and more than 
those that throw in e-business.” 


Rutgers University 
Widely known as a public Ivy 
League school, New Brunswick, 
N.J.-based Rutgers offers an 
MBA with concentrations in 
areas such as pharmaceuticals 
arts management, e-commerce 
and supply chain management 
“Supply chain management is 
a major focus of curricula devel- 
opment at all the Ivy League and 
leading state universities and is 
very much tied to e-business 
success,” says David Muha, a 
spokesman for the Rutgers Grad 
uate School of Management 


Bentley College 
Counting itself among the top 10 
IT-oriented schools, Waltham, 
Mass.-based Bentley College will 
introduce a dual degree known 
as the MBA/MSIT, according to 
Don Chand, director of the pro- 
gram. Bentley already offers the 
MSIT degree alone. 

- dill Vitiello 
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Proxy reports show that these IT 
execs have made it big, with sal- 
aries and bonuses that put them in 
the corporate elite. By Kim S. Nash 


UNG FIELD COMPARED 
with finance and opera 
tions, IT has climbed the 
corporate respectability 
scale in recent years. But 

not everywhere 
Just 46 of the Fortune 1,000 compa 
and pay their CIOs on par 
1e very top corporate officers, 


to an exclusive Computer 


; corporate rhetoric 
y as good as its IT 


The Securities and 


financial services firms, an inforn 
tion-intensive field that often leads IT 
trends. “Hopefully, they will pull oth- 
ers along,” says Patricia Wallington, 
president of CIO Associates, a consult- 
ing firm in Sarasota, Fla. 

She says the individual is what mat- 
ters most in whether a CIO can make 
the top echelons — not so much any 
corporate philosophy on the value of 
IT. When a long-standing, top-ranking 
CIO quits, his successor doesn’t auto 
matically get comparable status or pay 

For example, in 1999, 


Exchange Commission Robert Logan, then ¢ 
(SEC) requires compa retired as CIO at J.B. 


nies to report in annual 

proxy statements the compensation of 
their CEOs and the next four or five 
most hig paid officers. Computer- 
world ranked the CIOs included in the 
latest ies for the 1,000 bis »st 
yanies in the U.S. (see chart). 


comy 

Star treatment for the 46 elite CIOs 
includes fat retention bonuses, car al- 
lowances, low- or no-interest loans and 
lucrative stock packages. There are 
several millionaires in the group. And 
at least 16 CIO heroes made more than 
the chief financial officers at their 
companies last year, signaling that IT 
at those companies has lost its cost- 
center stigma. 

Still, the fact that less than 5% of 
Fortune 1,000 CIOs made the proxy 
statement “means the CIO isn’t of the 
stature everyone thinks he is,” says 
Victor Janulaitis, CEO of Janco Associ- 
ates Inc., a management consulting 
firm in Park City, Utah. 

Even among the big-league CIOs in 
the Computerworld ranking, 29 - 
more than half — made less last year 
than the CFOs at their companies. 

More companies than ever demand 
that CIOs help set strategy and make 
business goals come true. But that au- 
thority isn’t always reflected in the ex- 
ecutive order, says Wayne Sadin, CIO 
at Bank United Corp. in Houston. 

“There are barnacles encrusted 
around the thought processes at com- 
panies,” says Sadin, who is ranked No. 
14 and reports to the bank’s CEO. “I 
consider myself very lucky 

Five of the top 10 CIOs come from 


Hunt Transport Ser- 
vices Inc., a $2.2 billion trucking com- 
pany in Lowell, Ark. But his replace- 
ment, Kay Palmer, then 36, didn’t get 
the same status. Logan was an execu- 
tive vice presid Palmer is one rung 
down as a senior vice president. 
Palmer didn’t make the company’s lat- 
est proxy, either. 

Seniority, style of communication, 
mind-set, breadth of viewpoint — 
these are as important as knowing how 
Unix works or how to negotiate with 
Microsoft Corp. “You don’t want to sit 
in a board meeting and make picky lit- 
tle techie comments,” says Wallington, 
the legendary former CIO at Stamford, 
Conn.-base *rox Corp. 

here’s a difference between a 
boardroom-caliber CIO and an IT 
manager. “The IT person often thinks 
that when the project is done, IT is 
done,” says John Boushy, CIO at Har- 
rah’s Entertainment Inc. in Las Vegas 
(No. 8 on the list). “When I was solely 
looking at things from an IT perspec- 
tive, I’d be frustrated from time to time 
about why IT wasn’t more respected.” 

Boushy, 46, has been at Harrah’s for 
22 years. He started in IT, then spent 
four years as a special strategist to the 
chairman and another seven in high- 
level marketing. His time outside tech- 
nology, he says, taught him how to be 
an executive-suite CIO. 

“People at a senior level take respon- 
sibility for project outcomes. They 
hold themselves accountable to 
whether the business improves,” he 
says. “A CIO has to do that.” 
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Recent proxy statements for the Fortune 1,000 revealed 
eC () the following compensation figures for last year. Only 
CIOs mentioned in proxy statements are included. 


~ Ea 
COMPENSATION** [LOSS] 
Leslie Tortora, Goldman Sachs Group Inc. $600,000 $6,943,900 $1,879,566 $9,423,466 $33.0 billion $3.1 billion 
Francis Dramis, BellSouth Corp. $500,000 $701,500 $4,301,100 $5,502,600 $26.2 billion $4.2 billion 
Dennis Jones', FDX Corp. $573,266 $345,267 $1,612,019 $2,530,552 $18.3 billion $688.3 million 
Dawn Lepore, The Charles Schwab Corp. $521,667 $1,620,408 $9,894 $2,151,969 $7.1 billion $718.1 million 
Allen Gula, Franklin Resources Inc. $657,455 $812,683 $506,454 $1,976,592 $2.3 billion $562.1 million 
Jean Davis, Wachovia Corp. $374,167 $0 $1,462,702 $1,836,869 $7.3 billion $832.3 million 
Bruce Goodman, Humana Inc. $319,945 $270,000 $1,243,978 $1,833,923 $10.5 billion $90.0 million 
John Boushy, Harrah’s Entertainment Inc. $359,981 $110,000 $1,291,463 $1,761,444 $3.5 billion [$12.1 million] 
Allan Woods, Mellon Financial Corp. $347,916 $468,750 $527,102 $1,343,768 $6.0 billion $1.0 billion 
Michael Heschel, Kroger Co. $500,000 $361,620 $216,567 $1,078,187 $49.0 billion $876.9 million 
Kenneth Gerhardt, ConAgra Inc $329,419 $372,200 $219,978 $921,597 $25.4 billion $413.0 million 
Thomas Koops, BJ Services Co. $245,840 $225,007 $318,928 $789,775 $1.6 billion $118.0 million 
Gerald Marrone, Quest Diagnostics Inc. $331,587 $282,300 $157,364 $771,251 $3.4 billion $102.1 million 
Wayne Sadin, Bank United Corp. $200,000 $250,000 $315,200 $765,200 31.4 billion $134.9 million 
Ronald Gaston’, Venator Group Inc.*** $400,000 $100,000 $227,572 $727,572 $4.7 billion [$240.0 million] 
William Seltzer, Office Depot Inc. $465,000 $75,000 $148,416 $688,416 $11.6 billion $49.3 million 
Richard Chapman, Kindred Healthcare Inc. $282,935 $390,886 $5,106 $678,921 $2.9 billion [$53.6 million] 
Warner Schlais, Deluxe Corp. $214,583 $107,300 $241,554 $563,437 $1.6 billion $161.9 million 
Paul Ingevaldson, Ace Hardware Corp. $295,000 $85,550 $138,492 $519,042 $2.9 billion $80.4 million 
Brian Kilcourse, Longs Drug Stores Corp. $100,000 $135,819 $271,355 $507,714 $4.0 billion $44.9 million 
Christopher Norman, Herman Miller Inc. $228,019 $244,772 $12,036 $484,827 $1.9 billion $139.7 million 
Barbara Graham, Conectiv $262,500 $115,920 $98,596 $477,016 $5.0 billion $170.8 million 
Lisa Harris, Staff Leasing Inc. $227,885 $95,560 $149,500 $472,945 $3.1 billion $604,000 
David Gadra, Ikon Office Solutions Inc. $290,000 $141,960 $31,834 $463,794 $5.4 billion $29.1 million 
Robert Luminati®, Landstar System Inc. $200,000 $205,000 $52,278 $457,278 $1.4 billion $45.2 million 
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* Includes awards of restricted stock, payouts from long-term incentive plans : |Retired June 2000; now chief operating officer and vice chairman at Commerce 
and special compensation. : One Inc.; replaced by Robert Carter. 
** Excludes value realized for stock options exercised. : “Resigned May 2000; CFO Bruce Hartman has added CIO duties. 
*** 1999 compensation, from the most recent figures filed with the SEC. : “Resigned May 2001; replaced by Larry Thomas. 
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ilso senior 
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satisfy 
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interests is to install a stan- 
anywide IT infra 
Miller says 


projects are long and hard 


dard, comg 
structure 
Yet such 
and tend not to have much support 
from business-unit managers, he says. 
“This i 
at the ex 
How d 


he had 


why CIOs want representation 
ecutive table, 
i Sac 


” he says 
jin at Bank United know 
“When 
> annual report 


I saw my name 
That 
and when you see 


arrived? 
and picture in the 
deal 


} 
I 


was a big 


yourself in the proxy,” he said 

With higher stature come higher 
stakes. Once the CIO starts to pitch IT 
plans that influence the direction of a 
company, what goes right and wrong is 
much more obvious 

“What 


failure. I'v 


drives a lot of folks is fear of 
e never sat back and said 

CIO 
Financial in Newark, NJ. 


‘I've made it,’” 
at Prudential 
“If ther 
with 


says Bill Friel, 62, 


e’s a job in American business 
a day-in, day- 
I don’t 


more pressure on 
out basis and year over year, 
know what it is.” 


Francis Dramis 
BellSouth 


Cee St 


$5.5M 


). “I’m willing to be measured on the 


BUSINESS 


[op-tier CIOs also feel 
some vulnerability in their 
paychecks. 

Between bonuses and 


stock options, well over half 


the pay package of top CIOs 


is linked not only to meeting 


individual and IT depart- 
mental goals but also to 
company performance. Did 
the stock price rise? Did ex 
penses fall? 

“That's appropriate,” 
Brian Kilcourse, 49, CIO at 
Longs Drug Stores Corp. in 
Walnut Creek, Calif. (No. 


Says 


success of the company. You'd be 
amazed at how focused you get.” 
Al Gula, 46, CIO at Franklin Re- 
Inc., a San Mateo, Calif.- 
investment firm, 


sources based 
agrees. 

Gula (No. 5) says more than half of 
his pay is tied to company perfor- 
mance. “If Franklin doesn’t do 
well, my 
drop dramatically. We all 
work for the shareholder at 
the end of the day,” 

CIO pay at this level can 
vary 


compensation can 


he says. 


a lot from year to year, 
depending on how and when 
long-term incentives are be- 
stowed. For example, Kil- 
course will make $115,000 less 
this year than last year, ac 
cording to company proxies, 
mainly because he'll be get- 
ting fewer stock options 

St. Louis-based D&K 


Dawn Lepore 
Schwab 


a Se 


$2.2M 


Healthcare Resources Inc. has 
a complicated formula for fig- 
uring stock awards for CIO 
Brian Landry (No. 44). He re- 
ceives a certain number of 
shares based on where D&K 
falls in an annual health care 
company rating index. 

John Lochow (No. 26) 
joined Tech Data Corp. in 
Clearwater, Fla., as CIO in 
February 1998. He was eligible 
for a $300,000 bonus simply 
for staying with the company 
until last June. ae 

Overall, the go-go economy 
of the past two years helped create 
some CIO jackpots. But this year won't 
be as rosy. 

No. l-ranked Leslie Tortora at The 
Goldman Sachs Group Inc. last year re- 
ceived a $6.9 million bonus, more than 
ll times her comparatively modest 
salary of $600,000. 

Tortora, 44, is regarded as 
one of the most tale nted 
C1Os in the field, and her 
compensation reflects that. 
What’s more, — tothe 
dollar — equal to that of 
Goldman’s CFO. 

At the same time, the New 
York-based investment bank, 
which handled dozens of 
dot-com initial public stock 


it is 


offerings, made billions of 
dollars in profits in 1999 and 
2000. That also boosted Tor- 
tora’s pay. 

Tortora was unavailable 


Chief Internet Officers: 
A Fad About to Fade 


Ata fe 
outearned by an Internet executive 
For example, AdvancePCS, a managed- 
are company in Irving, Texas, didn’t include a 


panies, the CIO is outranked and 


C10 it 


hairman 


its latest proxy statement. But the “vice 
of e-business and technology” did 
show up (see chart) 

First Unio mn sat a bank based in Char- 
lotte, N.C., actually eliminated its corporate 
CIO position last October. It then appointed 
David Carroll, a former regional bank presi- 
dent, to chief e-commerce and technology 
officer. Carroll made the latest proxy 

Though there were fewer instances last 
year than in 1999, various versions of the Inter- 


: something’ in two years, and the chief e-com- 
: merce officer will get absorbed.” 


: Internet strategies at Genesis Health Ventures 
: Inc. in Kennett Square, Pa. But the elder-care 
: company didn’t directly replace Timon after 

: she retired in March 2000. Instead, it distrib- 


net officer position live on. But for how long? 
‘Pardon my French, but that [title] is a 
bunch of B.S..” says Victor Janulaitis, CEO 
of management consulting firm Janco 
Associates 
The positions are a fad destined to fade, 
Janulaitis says. “There will be a new ‘chief 


That's already begun. For example, 
Maryann Timon was senior vice president of 


uted her duties among other managers. 

At least one e-commerce executive has 
moved up to a bigger, better spot 

Steven Mnuchin was global head of e-com- 
merce at Goldman Sachs until February, when 
“co-ClO” was quietly added to his title 

At the same time, the company’s existing 
ClO, Leslie Tortora, gained Mnuchin's e-com- 
merce title in addition to her own. 

They now have the same titles, but Gold- 
man Sachs declined to comment on whether 
Mnuchin's compensation will match Tortora’s, 
who holds the No. 1 ranking on the Computer- 
world list. 


- Kim S. Nash 


SOURC 


Bruce Goodman | 
Humana 


0 COMPENSATION fi 


$L8M 
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for comment. 

But this year’s economic 
slowdown means that many 
CIOs will see a drop in pay, 
says Janulaitis. 

When sales and profits 
fall, bonus dollars that might 
have gone to senior officers 
instead typically become re- 
tention bait for lower- 
ranked employees. 

“This is the first recession 
we've gone into where CIOs 
are viewed as part of senior 
management,” Janulaitis 
They’ve gotten what 
they’ve wished for. Because of that, 
they’re going to be paying the price in 
this downturn.” 

Dawn Lepore, CIO at The Charles 
Schwab Corp. in San Francisco, had a 
great 2000. Her $1.6 million bonus was 
three times her $522,000 salary. 

In January, though, Schwab cut the 
salaries of its senior managers, includ- 
ing Lepore, 10% to 20% for two 
months, citing the sour economy. But 
to 47-year-old Lepore (No. 4), the 
move made sense. 

“Compensation of executives should 
be aligned with the interests of cus- 
tomers and shareholders,” she says. “If 
the economy shifts, is that fair? I don’t 
think about it that way.” D 


MOREONLINE 


plete list of 46 ClOs in company proxies, in 
luding a comparison of their 1998, 1999 and 2000 

compensation, visit our Web site 

www.computerworld.com/ciosalaries 


says. “ 


or the corr 


E-Compensation 
A sampling of Internet-related senior officers 


David Carroll $1,531,824 


Chief e-commerce and technology officer 
First Union Corp. 

a 
Jerry Foreman $7 795 75 
Senior vice president of home ati 
merchandising and e-commerce 


Service Merchandise Co. fa 
$527,692 


Jon Halbert 
Vice chairman, e-business and technology 
AaeanceP CS | 


Maryann Timon $46), 324 


Senior vice president of Internet strategies 
Genesis Health Ventures Inc. 


E. COMPANY PROXY STATEMENTS 
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Bkspeed: Every “write toGisk” operation increases fragmentation levels, and will eventually 
bring your system to its knees. 
Built-in defragmenters are slow, manual-only and cannot be scheduled. Only Diskeeper® 6.0 
automatic disk defragmenter eliminates fragmentation with swift, “Set It and Forget It” 
ease and proactively maintains your system performance at increases up to 200% — 
without requiring your attention. 

Diskeeper is so cost effective it actually costs you far more to ignore the problem or even 
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Dear Career Adviser: 


I’m a Microsoft Web applications developer (Microsoft 
Visual InterDev) with a background in Active Server 
Pages, Dynamic HTML and server-side data. I want to 
move into developing mobile/wireless applications. Giv- 
en my background and the flux of the wireless industry, 
is this a good choice? — UPWARDLY MOBILE 


Dear Mobile: 


Wireless is here to stay. But 
out of approximately 1 billion 
Web sites, only about 1.5 mil- 
lion currently provide wireless 
content. So unless you want to 
develop PlayStation gaming 
applications for the I-mode 
telephone (a joint venture be- 
tween Sony Computer Enter 
tainment Inc. and NTT DoCo- 
Mo Inc.), developing software 
for wireless devices falls into 
two distinct camps: applica- 
tion/operating system design 
and support, and chip design. 

The latter requires an inti- 
mate knowledge of embedded 
systems for wireless devices. 
This is different from your ex- 
perience developing applica 
tions in Windows for the Web. 

Even application-based de- 
velopment jobs within the 
wireless industry require you 
to write embedded software 
that’s performance- and stan- 
dards-oriented, says Peter 
Monahan, a San Jose-based 
staff engineer at Parthus Tech- 
nologies PLC, a Dublin-based 


supplier of mobile Internet 
technologies. Today’s wireless 
companies are judged by how 
tightly written and robust 
their code is, he says. 
Therefore, the basics for de 
veloping wireless applications 
include knowing at least one of 
the five Wireless Application 
Protocol stacks. It also requires 
an understanding of emerging 
wireless standards such as 
XML, XHTML or even SyncML 
(the data transfer protocol 
promoted by all of the major 
wireless device manufactur- 
ers). And it requires know 
ledge of other wireless stan- 
dards such as Bluetooth, which 
is a radio frequency electronic- 
communications equipment 
standard, and General Packet 
Radio Service technology. 
Some firms in this industry 
are also suffering financial 
woes. Therefore, you might 
be better off working for an 
outsourcing company that 
provides development ser- 
vices to a number of device 
and semiconductor manu- 


| were ranked based on the amount 
| of financial transactions they gener- 
| ated, literacy and education rates, 


US. Tops E-Commerce 
Readiness Index 


The U.S., Finland, iceland, Canada 
and the Netherlands ranked highest 
in e-commerce potential among 47 
nations, according to the “2001 
World E-Commerce and Internet 
Market Report,” released earlier 
this month by Meta Group Inc., a 
Stamford, Conn.-based IT research 
and consulting firm. The nations 


market potential, globalization prac- 
tices and technological sophistica- 
tion. Sweden, Australia, Denmark, 
Ireland and New Zealand rounded 
out the list of the top 10 countries. 


Heart Association 


| Qutsources Support 


The American Heart Association 


| (AHA) has chosen to outsource sup- 


port of its off-the-shelf software to 


facturers, says Monahan. 
Outsourcers that handle sev- 
eral standards and can quickly 
refocus development efforts 
are more apt to survive a 
downturn than firms that focus 


| ona technology that fails to 


become a dominant standard. 


Dear Career Adviser: 

I’m a director-level senior 
technologist at a nationally re- 
puted systems integrator. I have 
more than 12 years of IT experi- 
ence, from mainframes to lead- 
ing-edge e-business technolo 
gies. I’ve spent the past five 
years in consulting. I have an 
MBA and a master of science 
degree in MIS. My goal is to be- 


come a chief technology offi- 


cer. Should I stay in consulting 

or seek a full-time executive IT 

job at a major corporation? 
TARGETING CTO 


| Dear Targeting: 


Your answer depends on 


| your areas of technical exper- 


| PC Helps Support Inc. in Bala Cyn- 
| wyd, Pa. The Dallas-based AHA, 


which works to prevent heart dis- 
ease and stroke through research 


| and public education, uses applica- 


tions such as Microsoft Corp.'s Of- 


fice, Outlook, Project and Publisher. 


' Survey: Firms Plan 


| 


‘To Trim IT Spending 


| Roughly one-third of business deci- 


| 


sion-makers plan to decrease IT 
spending to compensate for declin- 
ing business performance, accord- 


tise, the current job market 
for your skill set as a con- 
sultant or a CTO, your com- 
pensation level and the time 
frame you have to reach your 
goal. 

CTO jobs require signifi- 
cant business experience and 
full project management re- 
sponsibility for a major sys- 
tems implementation. 

But if your technical skills 
are strong and you’re working 
at a good firm, you’re probably 
safer staying put 
and continuing to 
absorb new tech- 
nologies. 

Your consulting 
venue could also 
become your ideal 
transition vehicle 
right into an in- 
house CTO job. 
Provided that you 
aren’t violating 
any employment 
restrictions, try 
targeting your en- 
gagements toward 


FRAN QUITTEL is an expert 
in high-tech careers and 
recruitment. Send i 
questions to her at 
www.computerworld.com/ 
career_adviser. 5 
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Dear PEO: 


Many smaller and midsize 
companies set up PEO rela 
tionships, which can help 
them establish more profes- 
sional and efficient human 
resources functions. 

They also enable a com- 
pany to participate in larger 
groups for better coverage and 


lower rates on employee bene- 


fits such as health insurance, 

says David Scharff, an admin- 
istrative staff con- 
sultant in Walnut 
Creek, Calif. Such 
relationships are 
known as PEO or 
“co-employment” 
models and are 
legally recognized 
by all government 
agencies that regu- 
late employers. 

' Payroll checks 

} bear the name of 

both the client 

company and the 


' 
; 
i 
} PEO. But the 


sere rene sere meme oem en ed 


companies you'd 

really like to work for. Then, 
once you're involved with a 
successful project, make your 
long-term goals delicately 
known. 


Dear Career Adviser: 


I’m a programmer who is 
joining a young company that 
is affiliated with a professional 
employer organization (PEO). 
What does this mean, and does 
it makes a company more vul- 
nerable? 

— PEO PLENTY 


ing to new research from Newton, 
Mass.-based Cahners In-Stat 
Group. More than 40% of those 
surveyed said they felt the economy 
had affected their businesses nega- 


| tively. But more than half said they 


expect the economy and their 
businesses to pick up later in the 


| year. The study also found that 


the top three areas likely to be af- 


| fected most by planned increases 


| 


in IT spending are computer hard- 
ware (46%), network hardware 
(39%) and computer software 
(39%). For more information, visit 
http://instat.com/catalog/cat-oci. 
htm#oe0101mf. 





client company re- 
tains full control of its busi- 
ness, including hiring, pro- 
moting and firing employees; 
setting pay rates; conducting 
performance reviews; and, 
usually, handling its stock op- 
tion program. 

Little Rock, Ark.-based 
Employer Services Assurance 
Corp. and the Alexandria, Va.- 
based National Association of 


| Professional Employer Orga- 


nizations can tell you if your 
potential employer is using an 
accredited PEO and what the 
standards are. D 


' Beer Maker Turns to 
_ Streaming Video ASP 


| Anheuser-Busch Cos. in St. Louis 


recently selected Andover, Mass.- 
based application service provider 
(ASP) NaviSite Inc. as its exclusive 
streaming provider for live Internet 
broadcasts and on-demand video for 
its Budweiser.com site. NaviSite's 
StreamOS product is expected to 
simplify management of streaming 
content and allow Anheuser-Busch 
to monitor real-time online viewer 
Statistics to measure return on in- 
vestment, according to a statement. 
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RT TT TORI Be NAS OTT NE EE PE AN 

HACK OF ee mit, Vala 
| easier to express human emotion 

THE MONTH | and make things easy to explain,” 
| VERO Ry lip ame Ce mele 

Even as Israeli and munications manager at Boeing. 

Palestinian hackers 

continue to duke it out 

in cyberspace, a new 

conflict between Chi- 

nese and American 

crackers is now under 

way. Computerworld 

security specialist Deb- 

orah Radcliff warns that 

this could lead to collat- | 

eral damage to U.S. busi- 

nesses. » 48 


SECURITY 
JOURNAL 


After discovering that 
his network receives 
more than 1.5 illegal 
access attempts per sec- 


some are sophisticated, 
but fortunately, most 
aren't. » 52 


4 


EXEC TECH Peo 


Many organizations 


£ 
need something better 
than passwords to au- 
thenticate users. A 
thumbprint-reading 
mouse and a wireless 
proximity sensor are 


interesting and useful 
options. » 54 . 7 ; ji 
THE USE OF STREAMING MEDIA for corporate applications is taking off. About 
QUICKSTUDY | one-third of the 1,000 largest companies in the U.S. are using streaming 
| Web-based media significantly, according to one analyst. But IT managers 


face several challenges in creating and implementing streaming media: 


| 
Cascading Style Sheets | 
are asimple mechanism | 
that allows authors to 


attach formatting infor- They must decide what to outsource, know how to create 
mation (such as fonts, , See . ; j 

colts, Guana and content that’s optimized for streaming, make sure internal 
spacing) to HTML doc- streaming doesn’t overwhelm network capacity and set end- 


uments. Find out more | y : - 4 
in this brief primer. » 61 user expectations for streaming media quality. 





Ford Chooses Storage 
Networks Suite 


StorageNetworks Inc. in Waltham, 
Mass., announced that Ford Motor 
Co. has signed on as a customer for 
a suite of data storage management 
software. StorageNetworks said the 
services it's delivering to Ford in- 
clude its STORos operating system; 
STORmanage, which allows IT man- 
agers to load-balance and pool stor- 
age resources; and its virtual stor- 
age portal software, which monitors 
a storage network and its devices. 


Mobile Information 
2001 Server Released 


Microsoft Corp. last week an- 
nounced that Microsoft Mobile In- 
formation 2001 Server has been re- 
leased to manufacturing. The server 
gives remote users access to Micro- 
soft .Net enterprise applications, 
enterprise data and intranet con- 
tent. It also includes Outlook Mobile 
Access, which allows users to se- 
curely access their Exchange Server 
e-mail, contacts, calendar and 
tasks. In addition, the Mobile Infor- 
mation Server box includes Outlook 
Mobile Access, which provides ac- 
cess to Microsoft Exchange 2000 
Server and Exchange 5.5. 

The estimated retail price of this 
out-of-the-box application with the 
Mobile Information Server middle- 
ware is $75 per seat. The middle- 
ware alone costs about $15 per 
seat, according to Microsoft. 


Novell Upgrades 
Account Management 


At the Networld+interop trade show 
in Las Vegas last week, Novell, Inc. 
announced an enhancement to Nov- 
ell Account Management 2.1 soft- 
ware. The no-cost upgrade for ex- 
isting users adds support for Win- 
dows 2000-based Active Directory 
networks. The upgrade synchro- 
nizes user accounts in Novell's 
eDirectory with those in Active 
Directory, manages Active Directory 
objects from within eDirectory and 
permits single sign-on for users. 


DI 


BORAH RR: 
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We Have Met the 
Enemy and He Is Us 


OR THE SECOND TIME THIS YEAR, script kiddies using old tac- 
tics are bolstering their egos in the name of their countries. While 
Israeli and Palestinian hackers continue to duke it out in cyber- 
space, a new war between Chinese and American crackers is now 


under way. 


The score as of last Monday: China, 1,031; America, 750. That’s the num- 
ber of compromised Web sites each side claims to have defaced with its pa- 


triotic messages — or forced off the Net altogether. 


Everyone knows 
these strikes are 
fairly inconse- 
quential instances 
of Web graffiti and 
minor denial-of- 
service attacks by 
a bunch of script 
kiddies. But this 
little hacker war 


the agents were 
installed in orga- 
nizations with the 
worst — or no — 
information secu- 
rity. 

While the 
NIPC wouldn't 
connect this to 
the Chinese 


DEBORAH RADCLIFF is a 


could escalate into 
full-scale distrib- 
uted denial-of-ser- 
vice (DDOS) at- 
tacks against bigger busi- 
nesses with better security. 
And it could also draw U.S. 
law enforcement authorities 
into international investiga- 
tions that they want nothing 
to do with. 

Let’s start with the down- 
stream effect on U.S. busi- 
nesses: On May 5, the Na- 
tional Infrastructure Protec- 
tion Center (NIPC), a global 
reporting partnership be- 
tween the FBI and the pri- 
vate sector, posted a new 
warning of a sharp increase 
in scans against Port 80 (an 
always-open port for Web 
traffic), through which at- 
tackers are installing DDOS 
agents. 

You remember those 
pesky little DDOS agents se- 
cretly planted in small busi- 
nesses and colleges over the 
Net that were remotely com- 
manded to attack Amazon.- 
com, Yahoo, eBay and others 
last year? As they are now, 


Computerworld feature 
writer. Contact her at 
deborah_radcliff@ 
computerworld.com. 


American crack- 
ing, intelligence 
from the private 
sector reveals 
that these DDOS agents are 


| being installed on machines 
| the Chinese crackers claim 


to have compromised. 

“We contacted the victims 
on the Chinese lists, and 
we've recovered a few tools 
placed on the victim ma- 
chines — DDOS tools and a 
Perl exploit used to break 


| into Windows NT Web ser- 


vers through Port 80,” says 
Ryan Russell, an incident an- 


| alyst at SecurityFocus.com, a 


security intelligence firm in 
San Mateo, Calif. 

Because DDOS attacks are 
so difficult to prevent, even 
U.S. businesses with more 


security protection than 
| most are now at risk of los- 
| ing online business the way 
| Amazon, ZDNet and others 
| did last year. 


Now for the problems fac- 
ing law enforcement. No 
way does the FBI want to es- 
calate this script kiddie war 


| into an international cyber- 


conflict, contends Winn 
Schwartau, a well-known 
writer and lecturer on infor- 
mation warfare. Which ex- 
plains why neither the NIPC 
nor the presidentially direct- 
ed Critical Infrastructure 


Assurance Office in Wash- 


ington would comment on 
the Chinese/American 


hacks. 


“This is all new ground. 
There’s no way to know if 
this script-kiddie war even 
fits into the spectrum of 


| conflict, which in a pre- 


cyberworld followed a nat- 


| ural path between diploma- 


cy and kinetic conflict,” 


| Schwartau says. “Besides, 
| law enforcement would have 


to track these things down 
to see who's at the end of 
them. And I can tell you, 
that’s very difficult when the 
anonymity factor is main- 
tained and the attackers are 
offshore.” 


Attackers from each coun- 


| try are covering their tracks 
| by bouncing their attacks 

| through servers in Korea, 

| Russia and elsewhere to 

| make finding them and re- 

| taliating nearly impossible. 


About the only thing that 


| can be done at this point is 


for businesses and other or- 
ganizations to beef up their 


| perimeter security, starting 


in particular with the Web 


| sites of smaller companies 


and the .edu sites that are 
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This is all new 
ground. There's 
no way to know 

if this script- 
kiddie war 

even fits into 

the spectrum 
of conflict. 


WINN SCHWARTAU, WRITER AND 
LECTURER ON CYBERCONFLICT 


being defaced through an 
easy, l-year-old patchable 
exploit called the Unicode 
hole, according to Russell. 
The Unicode exploit allows 
crackers deeper into a Web 
site by dropping the symbols 
%cl%lc.. into the address 
space. 


Those companies that are 


| already on top of patches 
| and filters should batten 


down their hatches in antici- 
pation of DDOS attacks. 


| Check your fail-over mecha- 


nisms and IP blocking 
rerouting features in your 
filters (see the suggested 
reading list, below). 

And by all means, crack- 
ers, chill out before this es- 
calates into something big- 


| ger. The Chinese hackers 
| claim more sites, but the 


U.S. hackers have hit much 


| higher-profile government, 
entertainment and telecom- 


munications sites in China. 


| So call it even, will ya? D 


Helpful Reading 


> How to set up a DMZ: 
www.sans.org/infosecFAQ/ 
firewall/DMZ.htm 


> Information warfare: 
www.sans.org/infosecFAQ/ 
infowar/infowar_list.htm 


> Global alerts: 
www.nipc.gov/ 
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What could be harder than finding time to keep up with the latest IT trends and technologies? Changing the way you view IT. 


Doing your job without them. At ITworld.com, our innovative webcasting programs are changing 
how IT pros acquire information and knowledge. We'll change the way you view IT, too. 


View any IDC Live! webcast and get the IDC research bulletin, (Dworld.com 
"What Every Executive Needs to Know About Security," FREE (a $1,500 value). 
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BY LINDA ROSENCRANCE 
Compaq Computer Corp. and 
upstart RLX Technologies Inc. 
are fortify their positions in 
the 
servers. 
RLX, in 
Texas 
agreement 
which IBM 
new hig 


battle of new high-density 


Woodlands, 
week reached an 
with IBM under 
will resell RLX’s 
low-power 


The 
last 


ensity, 
IBM 
supply some of the server com- 


servers. also agreed to 
ponents. 

The RLX System 324 blade- 
type Web servers, which can 

used by Web hosting firms 
and Internet data centers, will 
feature Santa Clara, Calif.- 
based Transmeta Corp.’s low- 
power Crusoe ch 

Earlier in the week, Compaq 
and chip maker Intel Corp 
nounced that they’re building 
an ultradense server that offers 
computing power but 
takes up less 


more 
uses less ener 
space and costs less than exist- 
ing servers. 

Compaq Intel’s 
ultralow-voltage processors in 
hyperdense servers. 


will use 
its 
The company said it expects to 
ship the servers, code-named 
QuickBlade, later this year. 

RLX CEO Gary Stimac is a 
former Compaq cutive. The 
company employs several oth- 
er former Compag workers. 


new 


Improved Storage 
The new RL? 
will allow up to server 
blades to be installed in a sin- 
gle industry-standard server 
rack, the company said. Cur- 
rently, 42 servers can be stacked 

in one rack. 

Compaq has said that 200 to 
300 of its QuickBlade servers 
will fit in a single rack. 

RLX said its System 324 Web 
servers affected by 
heat constraints of traditional 
servers. The company added 
that each server blade requires 
only 1SW of power to operate, 
delivering five to 10 times the 
power efficiency of previous 
products. 

The RLX Sy n 324 chassis, 
preloaded with Microsoft 
Corp.’s Windows Web server 
software and other features, 


server design 


336 


aren't 


| 
| 
| 
| 


sells for $4,999. 


Boston-bz 
said this type of server 


Inc., 


Gordon Haff, 


ased Aberdeen Group | 


TECHNOLOGY 
Compag, RLX Technologies Launch High-Density Servers 


| will be a big deal in the next 


an analyst at | 12to18 months. 


“This is the logical next st 
standard rack-mounted 


| from 


ammeter Mek ee 


said 


’ he s 


“The key to 


licen them is [dealing] 
with the power and heat units. 
“With the next generation 


| 
| 


| are 
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of denser servers, [vendors] 
realizing that looking at 
power and heat has to be an 

gral part of the design. 
They are basically building the 
systems from the ground up,” 


| Haff said.D 
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VA Hospitals Test Smart Cards for Patient Information 


BY JULEKHA DASH 
The Department of Veterans 
Affairs (VA) is piloting a smart 


Two facilities, one in Mil- 
waukee and another in Iron 
Mountain, Mich., have been pi- 
loting the te ology since last 


formation and is expected to 
improve care and reduce ad- 
ministrative burdens for health 


care fi 


fall, according to Kent Simonis, 
director of veterans health ad- 
ministration in Washington. To 
date, 11,000 veterans have been 


issued the cards, and th 
plans to issue another 40,000 
before the pilot program has 
ended. 

Each B 
medical information such as a 


card contains 
veteran’s known drug all 
the names of his next of kin 
and whether he 
will. It also contains the pa- 
tient’s health benefit informa- 
tion, including benefits provid- 
ed by the VA network 

Simonis said the 
ties hope to minimize the time 
it takes to process medical in- 
formation. The cards will | 
caregivers “emphasize the hu- 
man component” of treating 
patients rather than 
time getting information to fill 
out their paperwork, he said. 

In addition, veterans who 
move, travel or use more than 


has a living 


est facili- 


et 


spend 


one medical facility will sav 
time by not havir 
at more than one VA hospital, 
said Simonis. 
view and update their informa- 
tion at kiosks in the 
hospitals. 


to register 


Veterans can 


located 


An initial evaluation of the 
pilot program in December 
will help the VA determine 
how effective the smart cards 
are and whether the organiza- 
tion will expand their use to 
other locations. Simonis said 
he couldn’t yet assess whether 
the 16MB cards have helped 
duce medical errors and said 
he won't know until the VA 
completes its evaluation. 

To protect patients’ privacy, 
the health 
crypted the data stored on the 
cards. A personal identifica- 
tion number is required to gain 
access to the information, said 
Simonis. Also, the cards can be 
read only at a VA health care 
facility. If the VA decides to ex- 
pand its use of the technology, 
it might deploy a biometric 
dev such as a fingerprint 
scanner, for additional 
rity, he said. 

Smart card technology hasn't 
gained popularity among health 
care institutions because of a 
lack of standards, said Wes 
Rishel, an analyst at Gartner 
Inc. in Stamford, Conn. But 
Simonis said he believes that 
by piloting this technology, the 
VA will help set some of those 
standards. D 


network has en- 


secu- 
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Who's That Knocking 
At My Door? Go Away! 


Every 1.5 seconds, someone tries to hack into Vince’s 
systems. Fortunately, amateurs make most attempts 


BY VINCE TUESDAY 
NE OF THE nagging prob- 
lems in information secu- 

difficulty 

how 


rity is the of 


finding out many 


security incidents occur. 
Unfortunately, this information is diffi- 
cult to obtain. 
Companies fear the public reiations 
lue impact of disclosing a 
each. Perversely, 


aling even an unsuc 
a pub 
And 


organization an- 


cessful attack can be : 


lic relations disaster. 
once an 
nounces that it has been at- 
suffer fur 


tacked, it may 


ther attacks as a result of 
the news coverage. 

For other crimes, we can 
atistics or in- 


data 


use police st 


surance claims to 
measure the change in risk 
Currently, 


isn’t much of a 


over time how- 
ever, there 
market for 


insurance 


cyberinsurance, 
data 
data 


so isn’t 


available. Police isn’t 
much better 
panies hesitant 


computer 


because com 


are to re- 


port crimes. Some distrust 
the police, believing them to have a low 
level of awareness of computer security 
issues. Laws like the Freedom of Infor- 
mation Act and the low rate of success- 
ful prosecutions add to this distrust. 
But companies can’t hide everything. 
The highest-profile attacks in the cur- 
rent environment are Web site deface- 
4 useful resource in this area is 
Hackers notify 
group when they deface a site, and 


ments. 
Attrition.org’s Web site. 
this 
Attrition.org makes a mirror copy of it 
[his means it has accurate 
data reflecting trends in this area. And 
the current Attrition.- 
org’s Web site is seeing about 30 deface- 


as a record 


trend isn’t good. 
an increase from 13 per 
a year and two per day two 
And it doesn’t look like this 


ments per day, 
day 
years 


ago 
ago 


er 
MANAGER'S 
JOURNAL 


will improve anytime soon. 

To supplement this data from the 
outside world, we also regularly exam 
ine 
that our defense is properly focused. 
We have 
outside the firewall that logs many at- 
tacks, and also deal 
at our firewalls. As 
analyzed a week’s worth of data 

down to the last packet and 

noticed some remarkable 
I hadn't looked at 
this data in detail for some 
and I was startled by 
what we found. 

My company was an ear- 


data from our systems to ensure 
an intrusion-detection sensor 


we log a great 


an exercise, we re 


cently 


trends. 


time, 


ly adopter of the Internet, 
so we have a large address 
range. This means that if 
an attacker picks an ad- 
at random, we 
in 65,000 chance 


have 
that 


dress 


major financial 
tion, making us a 


organiza- 

possible 
target of choice for direct- 
ed attacks. 

So, given all that, 
many attacks and probes do 
you think we detect? One per month? 
One per day? I thought the result would 
be something in the range of once per 
hour. My a much 
higher figure: attacks 
every second. 

Of the non-Web connections (such as 
Domain Name System, File 
Protocol or e-mail), 85% were unautho- 
rized, consisting of attempts to gather 
information or compromise our 
tems. Our firewall or our intrusion- 
detection system blocked these unau- 
thorized connections — no doubt a few 
of them were errors caused by people 
mistyping IP addresses. It’s also possi- 
ble that some much more competent 
attacks penetrated our outer shell. 

The most popular attacks are those 
that use scanning tools to target known 


how 


research uncovered 


We detected 1.5 


Transfer 


sys- 


vulnerabilities. The top attacks in our 
sample week were DNS BIND buffer 
overflow probes (379,273), Back Orifice 
probes (64,932), WU-FTP buffer over- 
flow (64,824) and NetBIOS 
share name probes (38,285). 


probes 


From the perspective of an attacker, 
the DNS and FTP attacks make a cer- 
tain amount of high- 
profile, easy-to-exploit problems have 


sense. Recent 
been discovered in these servers that 
some companies haven't yet patched. 
Exploiting these problems can give the 
attacker root access to critical servers. 
But the next two? These include some 
attacks by unskilled 
To run attack 
doesn’t take very much skill, but at least 
trying break into a 
on your own behalf. that scan 
for Back Orifice and SubSeven Trojan 
horse programs are bottom feeders. 
are script kiddies that are too 


foolish obviously 


individuals. a scripted 
you're system 


Those 


These 
lazy to break into systems themselves 
but are 
people have already 
left back into. 
work? Anyone with even the most sim- 
ple firewall will have blocked attacks to 
and all 
detects and protects against these tools. 


looking for systems that other 
broken into and 


doors Does this ever 


these ports, antivirus software 

The volume of these probes for pre- 
broken systems is worrying — 
these kids sometimes succeed, 
meaning that there must be many ma- 
chines with Back Orifice or SubSeven 
running, leaving them open to the least 
competent hackers. If someone were to 
try the real-world equivalent of these 
four scanning attacks — checking each 
car in a lot to see if it is unlocked by try- 
ing every door — someone would surely 
notice, and the perpetrator would al- 
most certainly warned off. The 
brazenness and sheer mass of these at- 
tempts show that these attacks aren’t be- 
ing noticed or that when they’re report- 


surely, 
must 


be 


| ed, no effective action is being taken. 
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Freedom of Information Act: This 
law makes information more accessible 
to the public. That's great if you want 
to find out what the FBI had on Elvis 
(http;//foia. fbi.gov/presley.htm) but not 
so great if you call in the FBI for help: 
Anyone can get the details of your secu- 
rity setup and how you were attacked 


SubSeven: A Trojan horse program 
that masquerades as a seemingly in- 
nocuous executable e-mail attachment 
Once launched, SubSeven allows com- 
plete remote control of a computer. An 
attacker can access or destroy files, 
steal account information and generate 
denial-of-service attacks — all without 
the user's knowledge. 


Information Sharing and Analysis 
Centers (ISAC): These centers were 
set up by President Clinton to promote 
sharing of threat and incident data with- 
in industry sectors. For example, the 
ISAC for financial services is at www. 
fsisac.com 


LINKS: 


www.attrition.org: This security Web 
site keeps mirror images of Web site 
defacements. For an example, see this 
Department of Justice hack: www. 
attrition.org/mirror/attrition/1996/08/ 
18/www.doj.gov. Many military sites 
have been replaced by tags like this 
one: www.attrition.org/mirror/attrition/ 
2001/03/31/mailserver.tci.navy.mil/. 


www.dshield.org: Need to see if 

a given IP address is attacking just you? 
Look at what other people are seeing at 
this Web site 


protect them from malicious straiers, 
but no such protection exists at pre- 
sent. Indeed, once a machine has been 
hacked, even if users become aware of 
the intrusion, they may find fumigating 
their machines difficult. 

What can we as security profession- 
als do to deter this behavior? I welcome 
your thoughts in the Security Manag- 
er’s Journal forum. D 


This doesn’t bode well for the future | 


of the Net. More and more people are | 


coming online, often without sufficient 
security protection. Within a second af- 
ter a Web site goes online, strangers are 


| trying to break into the systems. Users 


may expect that law enforcement will 


i ceoeiniesiendinatientiedia ranherienatinitennsiinitiamentatinebatiinientheentemeatsitianennnebeineia ae 
MOREONLINE For more on the Security 


| Manager's Journal, including past journals, visit 
www.computerworld.com/securitymanager. 


3c AANA 


+ 7 his week's journal is written by a real security manager, “Vince Tuesday,” whose name and onglage have been: disguised for obvious reasons It's s posted weekly at www. wcomputerworld. com to help you and our security manager 
better solve security problems. Contact him at vince.tuesday@hushmail.com or head to the Security Manager's Journal interactive forum 
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Making Passwords 


Good security has to balance incon- 
venience against effectiveness and 


TECHNOLOGY 


cost. Two new devices handle this 
problem well. By Howard Millman 


ORS 


face the unenvi 


able task of de 


signing security 


systems that meet 
their firms’ needs but don't 
irritate users. So they try to bal- 
ance effectiveness against con- 


While 


are mutually exclusive, 


venience the two goals 
new 
biometric products narrow the 
gap between them 

When selecting a log-on se 
curity system, you have to rely 
on one or more of the three au- 


You 


on something users 


thentication possibilities 
can base it 
know (such as a password), 
(like a 


token or smart card) or some- 


something they have 


thing physic: unique about 


them (a Diometric) 


xYLOC 


fore a Qi 


Passwords are cheap, plenti- 
ful and insecure. Tokens are 
handy but expensive and easily 
misplaced or stolen. Biomet- 
rics, which measure physical 
attributes with iris-scan, voice- 
recognition or facial-recogni 
tion devices, are usually costly 
and complex or affordable and 
unreliable. However, finger- 
print scanners are a bright spot 
in this mostly dismal state of 


iuthentication strategies. 


U-Match BioLink Mouse 
$120 
BioLink Techn 


Miramar, F 
www. biolinkusa.com 


ogies International Ir 


Last year [Exec Tech, March 
27, 2000], I tested a stand-alone 
scanner that 
affordable 
nation of security and conve 


fingerprint pro- 


vided an combi- 
nience. 

BioLink’s recently released 
U-Match takes the 
concept one step further. This 
$120 mouse contains a built-in 


mouse 


thumbprint scanner and pro- 
vides log-on security with no 
extra hardware on the desk. 

It can be used for a stand- 
alone PC, but IT departments 
will be interested in BioLink’s 
forthcoming server software, 
whose centralized administra- 
tion speeds enrollment and 


U-Match BioLink Mouse 


helps assure compliance with 
security policies. 

This server system and the 
U-Match mouse could reduce 
and maybe even eliminate pass- 
word-related calls to the help 
desk. That alone might justify 
the server’s cost of $3,500 for 50 
seats. 

BioLink says its mouse, un- 
like fingerprint 
readers, can’t be fooled by Silly 


some older 
Putty imprints or cellophane- 
tape impressions of the thumb 
print. In U-Match 


mouse even tell if 


fact, the 
can your 
thumb is still connected to the 
rest of you. I chose not to test 
this feature. 

Despite its comfort and ease 
of use, the biometric mouse 
still adds a few seconds to the 
can take 
even longer if it doesn’t imme 
diately 
print, as can happen when the 
thumb isn’t aligned exactly. 

And that’s a problem. The 
possibility of a false negative is 
the reason nearly all biometric 
products need a secondary, 

overriding mechanism — 
and 

a simple 


sign-on process. It 


recognize the finger- 


most opt for 
pass- 
word. 
Unfortunately, 
having an alter- 
nate log-on pro- 
cedure 
a real problem: 
Once the novelty 
of using the fin- 
gerprint wears 


creates 


off, users often routinely use 
just the password. For stand- 
alone use, typing ctrl-alt-delete 
can bypass the fingerprint 
scan. 

In the server-based version, 
due for release in the second 
half of this year, administrators 
can centrally administer pass- 
word access. Other centrally 
administered biometric prod- 
ucts, including the XyLoc sys- 
tem below, allow only adminis- 
trators to enter password over- 
I think that’s better than 
letting users enter a password 


rides 
anytime. 


XyLoc 
$179 
Ann Arbor, Mich 
www.ensuretech.com 


XyLoc is a wireless proxim- 
ity system that uses a credit- 
card-size device carried by the 
user as well as a Universal Ser- 
ial Bus-connected radio-fre- 
quency transceiver connect- 
ed to the PC. The card acti- 
which 
notifies the software to com- 


vates the transceiver, 
plete the log-on. 
XyLoc’s real value is that it 
automatically locks down the 
computer whenever the user 
leaves the sensor zone. No spe- 
cial action is required. When 
the user returns, the machine 
automatically unlocks itself. 
This solves the problem of 
staffers walking away from 
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Passe 


their desks and leaving their 
machines running and unpro- 
tected. This makes 
XyLoc ideally suited for health 


behavior 
care or retail organizations, 
where staffers tend to move 
around. 

The device worked well in 
my tests on PCs running Win- 
dows 98 and Windows 2000, 
consistently and 
locking the PC as I entered and 


unlocking 


left the room. 

One potential problem with 
XyLoc is that simple posses- 
sion of the card allows access 
to the machine and the net- 
work. And proximity cards, like 
one-time-password tokens, are 
likely to be misplaced or left 
lying around. Guarding against 
this requires using a password 
along with the card. 

Finally, if a user leaves his 
XyLoc card at home, provi- 
must be made for a 
loaner or temporary bypass. 

XyLoc ideal 
product to help travelers se- 
cure their laptops but not in its 
present form. About the size 
of a thick audiotape, the trans- 
ceiver is just too bulky to car- 
ry easily. Ensure is currently 
developing a more compact, 
Bluetooth version, which can 
be embedded in a laptop or 
even a cell phone. It’s due in 
two months and, I believe, it’s 
well worth waiting for. D 


sions 


could be an 


Millman is a freelance writer in 


| Croton, N.Y. 
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utomated network management software 
GETTI N GC TO TH E ticated stuff that promises an un 


»dented ability to monitor a corporate 
network — is on the horizon. 

But skeptical IT managers say the tools 
still aren’t smart enough. They want artificial intelli 
gence that can diagnose a network problem and get it 
right at least seven out of 10 times. 


Such automation relies on event correlation and 
root-cause analysis tools. The concept behind the 


tools is simple: keep track of network devices and 
relationships, automatically fix minor problems and 
refer more complex snafus to the network manager. 

But skeptical IT managers are demanding proof of 
better automation, bedrock interoperability and 
broader usefulness before they will buy such tools. 

“We've looked at these tools,” says Tom 
Revak, domain architect at pharmaceu- 
tical company GlaxoSmithKline PLC in 
Research Triangle Park, N.C. But “until 
the artificial intelligence exists that 
can automatically update a dynamical- 
ly changing network, it’s just one more 
pretty little map of what could t 
Historically, users have been “skepti- 
cal that software can meaningfully achieve what hu 
man expertise has achieved,” says Dennis Drogseth, 
an analyst at IT consultancy Enterprise Management 
Associates Inc. in Boulder, Colo. Drogseth researched 
and wrote the consultancy’s report on root-cause 
analysis and event correlation that was released in 
December. 

Users have viewed automation for root-cause 
analysis and event correlation as “more work than 
it’s worth, requiring too much labor and knowledge 
for rules to be appropriately defined for a 
environment,” says Drogseth. 

Exactly, says Kristina Victoreen, senior network 
engineer at the University of Pennsylvania in Phila- 
delphia. “We tried building on the autodiscovery that 
Spectrum does, but we spent more time fixing what 

discovered,” Victoreen says. “The guys who do 
[the model building] found it was quicker to build 
the topological model of the network by hand, which 
is very time-consuming.” Spectrum is a managemer 
tool from Aprisma Management Technologies in 
Durham 

The tools “need to sense when something out of 
the norm occurs, such as a critical deadline that 
forces people to work around the clock, and normal- 
ly noncritical failures become critical and require 
immediate response,” says Revak. “If they can’t do 
this automatically, the administrative overhead great- 

yutweighs the return on investment.” 

The moment of truth for users seems to com 
when the software tools “can successfully automate 
problem diagnostics 70% of the time or better,” 
Drogseth says in the report. At that point, “users 
believe they are justified in the investment. 

“That 70% mark is being met today by most of the 
better products,” Drogseth says. 

The benefits can be substantial, he says: smoother- 
running networks, better service-level delivery, re- 
duced staff requirements and lower overhead. These 
benefits, together with advancements in the software 
and a reduction in the costs of deployment, are dri- 
ving an increase in the use of root-cause analysis and 
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event-correlation tools, Drogseth says in the report. 

“There’s no way we could manage without it,” says 
Chris Vecchiolla, IT project manager at Royal Carib- 
bean Cruises Ltd. in Miami. Each of Royal Carib- 
bean’s 18 ocean liners has an IT staff of two people, 
but most systems management is handled remotely 
from Miami via satellite. 

Royal Caribbean uses Compaq Insight Manager 
and Unicenter from Islandia, N-Y.-based Computer 
Associates International Inc. to manage and monitor 
“about 170 items, such as SCSI card failure and out- 
of-threshold notices on servers,” Vecchiolla says. 

Escalating alarms notify both onboard and Miami- 
based IT staffers of problems. When the system 
detects a virus, it automatically destroys it and noti- 
fies onboard IT staff of the action via a banner ona 
monitor, Vecchiolla says. But should a server exceed 
a predetermined threshold, Miami staff could be 
paged to handle the problem, he says. 

Because Royal Caribbean’s ships cruise around 
the globe through every time zone, remote manage- 
ment from Miami sometimes occurs while onboard 
staffers are off-duty. When the Miami staff works on 
a ship’s systems, “Unicenter automatically picks it up 
and generates a banner that goes to the onboard sys- 
tems manager that tells them the date, time, work- 
station accessed, what was done,” Vecchiolla says. 
“The [onboard IT staffers] like that a lot.” 

Drogseth says that more than half of the enter- 
prise-level companies with which he spoke are be- 
ginning with automation’s “lowest common denomi- 
nator, alarm deduplication.” 

If a server goes down, each attempt by any user or 
device to access it can generate a separate alarm, 
which doesn’t describe the root cause of the prob- 
lem. Deduplication lets a network manager see a sin- 
gle, server-down alarm instead. 

A Kansas City, Mo.-based unit of Boston-based 
financial services company State Street Corp. isn’t 
doing root-cause analysis, but it does use Spectrum 
for alarm deduplication, says David Lembke, State 
Street’s network services manager. 

The University of Pennsylvania has been using 
Spectrum for five years to reduce the number of 
alarms reported by a single event, Victoreen says. 

“It works reasonably well, assuming we’ve built the 
model correctly,” she says. But “it turns out [that] a 
big map with red dots flashing to show alarms is not 
that useful for us.” 

Drogseth says that in his interviews with 40 mid- 
size to large companies, most IT managers said they 
know they must start automating, because networks 
have grown too large and complex to manage with- 
out automation tools. 

Though Revak is skeptical, “that’s not to say we’re 
not interested,” he says. 

“We're rethinking trying to model all of our net- 
works and maybe moving to trap aggregators or 
event correlation engines,” Victoreen says. 

IT managers are looking beyond the network focus 
that most vendors have stressed and are seeing ex- 
tended uses for the tools, such as to support perfor- 
mance, help desk functions, inventory and asset man- 
agement, change management, and security. Not all 
tools support all such extensions, Drogseth says. 

Vendors of most of the tools also claim some kind 
of predictive capabilities. 
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A network that learns over time 
can not only help prevent prob- 
lems, but it can also increase job 
satisfaction by releasing IT 
staffers from grunt work and call- 
ing on them only for more diffi- event correlation. 
cult questions. 

But where most such artificial 
intelligence efforts fall short is in 
detecting subtle changes, Revak 
says. “Through repeated small 
changes, the norm [can] shift very 
near the failure point, setting up a They're spending: 
significant failure situation for 
the next small deviation from the 
newly established norm,” he says. 

Predictive capabilities vary 
greatly, and not all are based on 
sophisticated artificial intelli- 
gence techniques, Drogseth says. 

At the bottom of the range is ba- 
sic linear trending. An algorithm 
can determine how long it will take 
a server to reach capacity if usage 


> Very 
> Somewhat 
increases by, say, 20% per month. RCE: ENTER 

At the other end are sophisticat- 
ed tools like CA’s neural network- 
based Neugents, Drogseth says. 

A Neugent can look at historical data about net- 
work resource usage and a company’s business cycle, 
says a CA spokeswoman. By aggregating and correlat- 
ing data on network infrastructure and business rela- 
tionships, the Neugent might predict that a server 
would reach capacity in six weeks but drop back to 
30% in the seventh week, she says. 

Royal Caribbean plans to implement CA’s Neugent 
for Windows NT networks, which “will take us to 
another level of management,” Vecchiolla says. 

Before the root-cause analysis industry achieves 
that new level of management, however, it must hur- 
dle the stumbling block of standards, Drogseth says. 

Part of why the University of Pennsylvania isn’t 
“getting as much back as we'd hoped for is that we 
have a lot of different software from different ven- 
dors, and they have a lot of different proprietary 
schemes and interfaces,” Victoreen says. 

“The systems management industry must develop 
the standards and interoperability capabilities re- 
quired for the tools in the event, problem, change, 
configuration, inventory, workload management, 


Those 81 companies use it to: 
> Speed problem resolution 
> Improve service delivery 
> Reduce staff, overhead 


> More than $200,000 
> $100,000 to $200,000 
> $10,000 to $100,000 
They consider acceptable a rate of: 
> 75% to 90% accuracy 
> More than 90% accuracy 


But how satisfied are they? 
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Who's Using It ee together,” oon ; 


Of 135 companies surveyed by Enterprise 
Management Associates, 60% are doing 


‘Each of these discip 
tains some part of the ov 
equation.” 

Root-cause analys 
correlation tools aren't 
network so much 


onto a 


33% 
27% 
24% 


ire woven into its fabric, 
seth says. 

De facto standards such 
HTML and XML help pro 
27% cooperative interface between 
16% 


44% 


different vendors’ products 

But true interoperability de 
mands a common thread, “a stan- 
dard structure of data maintained 
a database 


43% 
of network devices, applications 
40% PE 


in the object store” — 


and relationships, Drogseth says 
‘At its most esoteric, 
48% refers to that platonically 5 
38% state that never gets achieved, 

e says. “What we're seeing is some 
adoption of some standards by 
some vendors.” 

Users should look for vendor partnerships to ease 
root cause tool deployment and management 

That’s easier now than several years ago, when 
New York-based financial services firm began do 
root-cause analysis. “We had to build a lot of 
ourselves because they weren’t available at tl 
says the firm’s IT vice president, Gary Butler. 

“We're using the [System Management ARTS Inc 
correlation engine, and we're feeding it with data 
from Tibco’s smart agents” and San Francisco-based 
Micromuse Inc.’s NetCool presentation software, 
says Butler. “We can’t always find the root cause 
100% of the time, but we can at least find the more 
serious event, and that keeps us from wasting time 
with all the symptoms.” 

Revak says, “As the industry matures, the best bet 
is for companies to focus on developing their event 
infrastructure technology — a prerequisite for any 
advanced management — their people and their 
processes. Technology is not the most important. 
[Vendors] dislike it when I say this, but most impor- 
tant are the people and the processes” and th 


tionship between them. D 
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= Advanced correlative intelligence: A problem-isolation 
method cloaked in secrecy by most root-cause analysis tool 
vendors. This is where language is most likely to become 
obscure or insubstantial 

= Event correlation: Examines the relationship among events 
across an IT infrastructure to narrow the search for the cause 
of a problem. 

= Object data store: Knowledge specific to devices, applica- 
tions and connections that provides a database of codified 
detail for understanding objects and their relationships. An 
extensive object data store can contain object performance 
data for use in modeling routine interactions across device 


types such as servers and ro 5 
= Polling and instrumentation: Provid 
about infrastructure availabilit fo 
They can include common availabilit 
utilization or even remote monitoring 
= Presentation and context: Encompass 
you see, how it looks 
detailed the reporting, u 
suggests a solution, it’s just so much r 
= Root cause analysis: Isolates the caus 
performance 
® Topology: The map of where things are. It 
physical (Layer 2) and logical (Layer 3) netwe C 
up the Open Systems Interconnection stack to inclu 
ration information relevant to s 
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One-third of large corporations already have 
streaming media applications in place, but creating 
and delivering that streaming content takes some 
work, say [TY managers. By Matt Hamblen 


stream 


Media 


GOES MAINSTREAM 


ANY COMPANIES have deployed streaming 
media for at least a few applications, but 
The Boeing Co. in Seattle thrives on it. At 
Boeing, it’s possible to see Web-based 
video of rocket launches or to hear 
streaming Web audio of quarterly reports. 
And many of the aerospace company’s 
198,000 workers worldwide also have access to video, 
audio and slide presentation training materials over 
Boeing’s internal network. 

Boeing has made streaming media part of its IT 
architecture, say company officials. “With streaming, 
it’s easier to express human emotion and make 
things easy to explain,” says Dave Weitz, a senior 
communications manager. 

The use of streaming media for corporate applica- 
tions is taking off. About one-third of the 1,000 
largest companies in the U.S. are using streaming 
Web-based media significantly, and half of them will 
be by 2003, says Lou Latham, an analyst at Gartner 
Inc. in Stamford, Conn. 

“It’s not complex, and it’s not expensive” to provide | 


streaming media to either internal users or external 


customers or partners, Latham says. But if a company | 


sets up streaming feeds improperly, especially to 
fussy consumers on a Web site, it can become “an 
annoyance ... and it will turn users off the whole 
process, and they won't use it anymore,” he says. 

IT managers face several challenges in creating 
and implementing streaming media. These include 
deciding what to outsource, knowing how to create 
content that’s optimized for streaming, making sure 
internal streaming doesn’t overwhelm network ca- 
pacity and setting end-user expectations for stream- 
ing media quality. 

Basic technology components for streaming media 
include video/audio servers to compress and encode 
digital images for streaming and a delivery network 
with sufficient bandwidth to accommodate the 
stream without interruption. End users also need to 
have PCs equipped with audio and video player soft- 
ware. Both RealPlayer Plus from market leader Real- 
Networks Inc. in Seattle and Windows Media Player 
from Microsoft Corp. are freely available. 
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Boeing has three years’ experience with streaming 
audio and video and has discovered that for external 
Internet users, it’s faster, “easier and far cheaper” to 
hire a content delivery network provider, says Weitz. 

Such services typically cost $5,000 to $10,000 per 
event, analysts say, depending on the audience size, 
although several users say they pay a fraction of that 
amount if they use the service regularly. 

“The majority of enterprises have hosted Web con- 
tent themselves in the past when it was text and 
HTML, but when you start talking about a site with a 
lot of streaming media, you see a lot more outsourc- 
ing,” says Michael Galleli, a consultant at KPMG 
Consulting in Los Angeles. 

Boeing uses server software from RealNetworks to 
stream programs to internal and external users via 
the Web. Each user must have RealPlayer software to 
view and hear the programs. 

Video and audio streaming have gained steam in 
the past two years as internal networks have in- 
creased bandwidth and as Internet access through 
high-speed cable modem and Digital Subscriber Line 
connections has become more common, analysts say. 
However, these technologies aren't as fast as adver- 
tised, Latham says, and companies must stream con- 
tent to accommodate different connection speeds. 

For outside users, Boeing encodes streams to be 
received by users with connections of 28K bit/sec., 
56K bit/sec. or 200K bit/sec. 

Latham argues — though some disagree — that 
100K bit/sec is the slowest video stream to have ac- 
ceptable quality. Users coming in over slower dial-up 
Internet connections are likely to experience jerky 
video and audio synchronization problems. 

Charles Schwab & Co. in San Francisco produced 
its first live video webcast for active traders around 
the world in February and opted to use the content 
delivery services of Akamai Technologies Inc. in 
Cambridge, Mass., which piped Schwab data to video 
servers around the world, says Tracy Behler, director 
of e-communications media at Schwab. 

“We figured we’re not the streaming experts,” 
Behler says, noting that it took plenty of hard work 
by Schwab staffers to produce a good webcast. “The 
biggest thing we learned is it ... takes an army to 
produce a quality program, with setting up the crew, 
picking the set and developing the right content.” 

UBS Warburg has been streaming video and audio 
from its morning analyst briefings since 1998 and 
recently began serving institutional investment 
managers in the U.S., says Imdad Hussain, head of 
technology for equities electronic marketing at the 
London-based firm. 

UBS records the sessions with an automatic video 
camera, but London-based Raw Communications 
provides the servers that stream media over a satel- 
lite network provided by Loral CyberStar in Rock- 
ville, Md. “We could have done part of this ourselves, 
but we're an investment bank and not a streaming 
video provider,” Hussain says. 

Overall, outsourcing streaming is easier and 
cheaper, according to David Rader, an analyst at 
Jupiter Media Metrix Inc. in New York, who points 
out that once the content is created, there is a per- 
event cost and little else. 

By contrast, costs for in-house efforts can reach 
$50,000 for a basic setup that includes a streaming 
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server, a live encoder and a camera, Rader says. | 

For companies streaming over internal networks, 
bandwidth is another concern. To support streaming | 
to internal desktops, Boeing uses a single RealSystem 
server, Weitz says. Because simultaneous usage by 
198,000 workers would clog its networks though, the | 
company doesn’t make live Internet-streamed video 
announcements available internally. 

Instead, Boeing records such events and stores 
them on a server for on-demand use later. Mindful of | 
the bandwidth limitations of its 10G bit/sec. 10Base-T | 
LAN and T3 WAN connections, Boeing has restrict- | 
ed the system to 400 concurrent sessions. That | 
seems to work out without network downtime be- | 
cause workers want to see announcements at differ- | 
ent times, Weitz says. Workers still want to see live 
material though, so the company is in the midst of 
upgrading to a multicasting system where multiple 
distributed servers will stream content simultane- 
ously and with greater bandwidth efficiency. 

Boeing also faces another, more basic, obstacle to 
providing streaming media to internal users: The 
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company has many older PCs that don’t have sound 


| cards or speakers, especially on the factory floor. 


Aside from the basics of setting up a streaming in- 
frastructure, IT managers must face the fact that 
Web video quality, while acceptable, is inferior to 
television-based video, Weitz says. And even if the 
Web v ) is high quality and the picture isn’t jerky, 
it’s still difficult to perceive cuts and fades in video 
shots as they would appear on television. This means 
you can’t effectively put a TV commercial on a Web 
stream, he says. 

Boeing usually provides internal users a streaming 
video window that’s about 3 by 5 in., or one-fourth 
the full monitor size, but full-screen video is possi- 
ble. Internal users receive streams at 200K bit/sec., 
which provides a good quality stream, Weitz says. 

Still, he says, “We have learned that people have a 
hard time with quality and they expect the same 
quality of TV, which of course they don’t get.” And, 
he adds, “More employees and outsiders are expect- 
ing our streaming content — and the more that peo- 
ple hear of it, the more they demand it.” D 


‘Tips for 
_ Better 
Streaming 


Consider hiring a content delivery network 
service provider for streaming to external 
users, especially if you're providing 
live streams. 


Don’t underestimate the work 
and time involved in scripting, editing 
and producing video for streaming. 


Design streaming media to accommodate 
users with low (28.8K bit/sec.) bandwidth. 


For internal streaming, ensure that routers 
are set to support streaming functions and 
that the routers give streaming media priority. 


Set up a dedicated server, either Windows 
2000 or a RealNetworks server, for streaming 
video and audio content. 


Set user expectations that streaming video 
will be of significantly lower quality than 
a standard video viewed on a television. 
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At PC EXPO, the expo portion of 
TECHXNY, you’ll find mobile & wireless, 
business solutions, leading-edge Internet 
security advances, ASPs, the latest in 
Linux, storage technologies and more. 
The best products, services and real- 
world solutions —all delivered by the 
best vendors and solutions providers in 
the IT industry. 
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Limited Engagement. One Week Only. 


TECHXNY’s full week of conferences, education summits and 
special events has something for just about everyone. The IT 
Innovation Conference focusing on innovative security solutions... 
an IT infrastructure built for speed...top-notch information-sharing 
architecture...Best of Brainshare...SAN and Clustering Summits... 
and the wide, wide, wireless world. 


Marketing Integration eXchange, a conference and exposition, 
focusing on the use of technology to maximize marketing 
effectiveness and optimize customer relationships. 


There's the Finance Exchange. eTV World. Working Woman 
Women Elevating Science Technology Awards. Compelling 
keynote speakers. Solutions Integrator Think Tech. PC Career 
Expo. And still more targeted programs and events are on their 
way to bring you the cutting-edge of IT today. 


To learn all about what there is to see, do, hear, and learn at 
TECHXNY this June, log on to www.techxny.com. And while you’re 
there, make sure to register right away! 
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HOT TRENDS & TECHNOLOGIES IN BRIEF 


Cascading Style Sheets 


FINITION 


Cascading Style Sheets (CSS) is a 
simple mechanism that allows 
authors to attach formatting 
information (such as fonts, col- 
ors, positioning and spacing) to 
HTML documents. The CSS 
language is human-readable 
and -writable and expresses 
style in common desktop pub- 
lishing terminology. 


BY JOY-LYN BLAKE 
ASCADING STYLE 
Sheets (CSS) will 
definitely change 
the way you think 

about the Web. 
With this technology, you 
can create reusable code that 
acts as a style sheet to define 
typographic and color infor- 
mation, position objects and 
control or change the look of 


| cise positioning of elements 
| within a page. 


| Web pages have become little | 


an entire Web site, all from a | 
single file. Style sheets let you | 


control how a Web page is ren- 


dered without compromising | 


its structure. You can do that to 


some extent with the Web | 


protocol HTML, 


but | 


CSS allows for | 


pixel-pre- 


We've gotten used to the 
premise that page structure — 
including paragraphs, lists, ta- 
bles and frames — is depen- 
dent upon coding practices. 
The more intricate the page 
structure, the more complex 
the coding required. Many 


more than deeply nested layers 
of tables, font tags and line 
breaks — a nightmare to trou- 
bleshoot, rearrange 
design. 

Style sheets let Web authors 


or re- 


accomplish the same result | 
without all that messy HTML | 


coding. Anyone who’s ever had 


| to troubleshoot HTML code 


| knows how difficult it can be to | 


track down errors. 
Imagine the 


that sets 


» the font of | 
a passage | 


of text and 
also calls for 


the text to be | 


dark red, italic 


CSS provides an 
alternative to messy 
HTML tagging. 


@ Are there technologies or issues you would like to learn about in QuickStudy? Please send your ideas to quickstudy 


and underlined on a blue back- 
ground, with a repeating hori- 
| zontal image border 
around all. And you want a 
margin only at the top of the 
bar, not the bottom. HTML re- 
quires a table to accomplish 
| this, along with the requisite 
tags controlling font color, font 
| face and underlining. But the 
| cell-padding parameters apply 
equally to the top and bottom 
of the cell, so there go your 
margin specifications. 
CSS, however, gives you full 
control, without multiple tags 


and a 


or the need to wrap the entire | 
element in a table. Here’s the | 


CSS code for the above exam- 
ple: H1 {color: maroon; font: 
italic lem Times, serif; text-dec- 
oration: underline; background: 
blue url (titlebg.png) repeat-x; 
border: Ipx solid red; margin- 
bottom: 0; padding: Spx;}. 

You decide you don’t like the 
blue background after all, and 
with a few quick keystrokes, 
make it green or yellow or — 
you get the picture. Want to 
add the same style to the Level 
2 headers on the page? Just 
change the line to HI, H2. Now 
picture how much typing your 
production person would do to 


accomplish the same task in | 


HTML. 
CSS was created by Hakon 
Wium Lie, the chief technolo- 


gy officer at Oslo-based Opera | 
AS, and Bert Bos, a | 
member of the technical staff | 
| at the World Wide Web Con- | 
HTML | 
tagging necessary to | 
create a Level 1 | 
header (HI) | 


Software 


sortium in Washington. 
Lie and Bos built CSS on the 
premise of cross-platform de- 


sign, using simple codes that | 


are precisely documented in 
public specifications. 

Thanks to the technology 
they created, you no longer 


need unseemly hacks and im- | 
to | 


HTML coding 
the desired effects. 


proper 
achieve 


| That’s all controlled simply | 
your | 
| style sheets. Need to redesign a 
| Web site? No more painstaking | 


| and efficiently within 


page-by-page code changes; 
update your style sheets, and 
the changes replicate instantly 
across your Web site. 

The flexibility of style sheets 
extends even further. 

Since specifications can be 
saved as a document, different 
styles can be called by those 
pages that require them. Your 
home page might require one 
structure, while all other pages 
use a second format. You can 
have one style sheet called by 
the home page and a second 
style sheet called by all other 
pages. Or simply embed the 
CSS text on the home page and 
call the main style sheet every- 
where else. It’s easy to divide 
your site into different formats 
for different areas, without 
bogging down production. 


Not Without Problems 


The use of style sheets isn’t 
the answer to all of your prob- 
lems. There are still limita- 
tions, particularly in pre-CSS 
browser versions. The first 
browsers that attempted CSS 
support — Netscape Navigator 
4.x and Microsoft Corp.’s In- 
ternet Explorer (IE) 3.x — 
were buggy, incomplete and 
contradictory. Many of those 
problems have been cleared up 
in IE 4.x and 5.x, the Netscape 
Gecko rendering engine and 
Opera 3.6. In fact, author Eric 
Meyer used Gecko along with 
IE 4.5 and 5.0 for the Macintosh 
to create figures for his book 
Cascading Style Sheets (O’Reil- 
ly & Associates, 2000). 

CSS allows Web authors to 
return to using HTML for 
structural purposes, not for 
presentation. According 
Meyer, that capability, along 
with the further benefits of im- 
proving accessibility and posi- 
tioning documents for a switch 
to an XML-based world, make 
CSS a compelling technology. 
The benefits arguably out- 
weigh the drawbacks, which 
will be eliminated with time. 


to 


CSS in Action 

For a truly elegant implementa- 
tion of CSS, check out the Web 
site of Battenpapierfabrik 
Gmund GmbH & Co. (www. 
gmund.com), a specialty paper 
producer in Gmund am Teger- 
nsee, Germany. Although the 
page source code seems 
daunting, the results of using 
style sheets are well worth the 
time and effort. 

The Web site appears to be 
laid out as an image map, with 
many overlapping rectangles 
carefully arranged in a graphics 
program, each one carefully 
coded in HTML to link to its 
page. It could have been done 
that way, but then changing 
any single image in the collec- 
tion would have required re- 
working the entire graphic. 
With CSS, however, swapping 
out any single image layer is 
quick and easy: Just change 
the entry in the style sheet, and 
you're done. 

~ Joy-Lyn Blake 


According to Web usability 
guru Jakob Nielsen, “CSS pro- 
motes site consistency and im- 
proved usability.” D 


Blake is a freelance writer in 
Dover, N.H. 
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aking Fast Work of 
Wireless Appl 


s drag-and-drop tools speed the 


development of wireless applications 


BY AMY HELEN JOHNSON 


wanted 
add mo 
capabilities to its mix 
AN- an deliv 


systems, it started looking 


i Web-based 


plication development 
hat was flexible : 

says Tom Bell, 

r at the finan 

arm of Toronto 

Thomson Corp. 
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t in its industry to 

“ss access, says Bell 

implementation speed 
to a visual drag-and- 
interface that sets iCon- 
verse apart from its competi- 
Andy Fox, 
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Drag and Drop 
The interface lets develop- 
applications by 
enterprise data onto 
and then seeing 


will 


reens 
appear for 
types of wireless de 
jeveloper can cus- 

esulting screens 
Converse parallel 
tools to automati- 


application for 
each wireless device targeted. 
“You can quickly make ap- 


jlications for 


I devices 
that look good and are specific 


those 


for each individual device,” 
says Peter Firstbrook, an ana 
lyst at Meta 


Stamford, 


Group Inc. in 


Conn. And because 


Wireless 
Language (WML), 
generates portable 


the output is in 
Markup 


and customizable applications, 
A developer can pour 
that WML code into a rapid ap 


he says 


plication development envi- 


ications 


ronment like Visual Basic and 
then modify it. 

[he deployment piece, iCon 
verse Interaction Server, maps 
presentation-neutral XML tags 
onto wireless devices like 
Wireless Application Protocol 
enabled phones and personal 
digital assistants. XML enables 
iConverse to use data from 
many different sources 
Server 


Interaction runs on 


ICONVERSE’S CO-FOUNDERS (from left): Toffee Albina, Andy 
Fox, Michael Tinglof and Tim Rochford. 


iConverse 


71 Second Ave., Waltham, 
Mass. 02451; (781) 622-5050 


Web: www 


The technology: Wireless apr ali 
cation idevelopment s software 


w.iconverse.com 


Why it’s worth watching: Its 
drag-and-drop GUI is intended to 
speed development 


Company officers: 

¢ Andy Fox, co-founder and 
chairman 

¢ Ron Matros, CEO and president 
° Toffee Albina, co-founder and 
chief speech technologist 

¢ Tim Rochford, co-founder and 
chief technology officer 

¢ Michael Tinglof, co-founder and 
vice president of research and 
development 


Milestones: 
¢ December 1999: Company 
founded 


© December 2000 © 
Firstversionreleased | 
¢ April 2001: Version eC Mep, 
2.0 released C OMmp 
Employees: 100 D 


Burn money: $161 

million from Advanced 
Technology Ventures and Prism 
Venture Partners 


Products/pricing: |Converse 
Mobile Studio is available for free 
iConverse Interaction Server starts 
at $100,000 


Customers: Massachusetts Ele c 
tronic Commerce Association Inc., 
Salesnet, Smartshop.com Inc., 
Thomson Corp. 


Red flags for IT: 

¢ Development tools are less of a 
concern if you plan to outsource de- 
velopment and application hosting. 
¢ Larger players like IBM and Micro- 
soft Corp. could develop competi- 
tive offerings. 
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top of Java 2 Enterprise Edition 
(J2EE) application server. Be 
cause J2EE is a de facto industry 
standard, customers can choose 
in application server other than 
Interaction Server to run their 
First 


wireless applications, 


brook says 


Cost Efficiencies 


Fox says the biggest benefit 
iConverse gives developers is 
reduced creation and mainte 
nance costs. He claims that the 
drag-and-drop graphical use 
interface (GUI) is so easy to 
use that a sophisticated end 
user can create the display for 
an application. However, a de 
veloper 
to build the integration between 
and the 
wireless displays, says Fox. 

In addition, 


is still the best person 
back-end data sources 


companies can 
expand their applications with 
little added cost because the 
platform is licensed software 
instead of services, says Fox. 
IConverse also offers an appli 
cation hosting service for cus- 
tomers who want to outsource 
their wireless deployment 
According to Fox, iCon 
ideal customer is an 
IT department in a large, 
global company that’s building 


verses 


employee-focused applications 
mobile workers. The 
is targeting industries 


for its 
vendor 
such as field service, sales 
° force automation and fi- 
* nancial services. 
Version 2.0 of the 
iConverse Mobile Stu- 
Interaction 


which shipped 


and 
Server, 
last month, includes sup 
port for pagers and paging 
networks. Developers will find 
a better debugging utility, im 
provements to the interface, 
the ability to create and reuse 
objects, and easier back-end 
connectivity, says Fox. 
[he company plans to en- 
hance the software’s connec- 
tivity so wireless users can ac- 
if they 
their 
networks. This means building 
data synchronization, says Fox. 
IConverse is also investigating 
support for natural-language 
speech technology, he says. D 


cess data even aren't 


connected to wireless 


Johnson is a Computerworld 
contributing writer in Seattle. 
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STATE OF 
THE MARKET 


Waiting for 


IConverse’s cv 


{ r) Wireless , 
as Aethe 
Md., and Everypath Inc 


the coding for their 


service pr 
nOwinn } Mil ls 
inSan Jose do 


ustomers, SO a 


Systems Inc 


good developer s interface like the one 


The other set of competitors, including 
companies like MobileQ and ThinAir 
Apps, provide comparable capabilities 
he says, but neither has a rapid applica 
tion development interface that's as 
> one iConverse has. 
stbrook says the biggest threats 
iverse have yet to 
ly, the company will face competition 
( jiant intrastructure providers like 
IBM and Microsoft Corp. These compa 
nies don't yet have mature wireless 
he says, but they 
pose a significant threat because of th 


market reach 


emerge. Even 


developer systems, 


ae soft were to provide a GUI ir 

isual Basic oth at matched iConverse’s 
it could grab market share because of its 
installed base and industry stature, First 
brook says. “Even if it's technically not 
as good, people will go after it because 
[Microsoft] is a more strategic partner 
than iConverse,” he says 


MobileQ Inc. 
New York 


www.mobileg.com 


XMLEdge functions as both a develop 
mer atform and a server for integrat 
ing business applications with mobile 
devices. The GUI-based development 
environment allows programmers to 
abstractly design the workflow and 
i nga 
applicati 


ThinAirApps Inc. 
New York 


www.thinairapps.com 


The ThinAir Server is a Java-based 
bridge between enterprise applications 
and laptops with wireless modems, 
Microsoft's Pocket PC, or wireless 
devices that use the Palm OS or Water- 
loo, Ontario-based Research in Motion’s 
operating system 

- Amy Helen Johnson 
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TECHNOLOGY 


To give yourself the best job edge and pay 
boost, consider training that will get you 


these certifications. 8 


HICH CERTIFICATION 

is right for you? The 

answer really de- 

pends on the stage of 

your career, the certi- 
fications you already have and your 
chosen technology area. 

However, at any given time, there 
are usually some hot-button certifica- 
tions that — because of supply, de- 
mand or the difficulty of achieving 
them — can substantially improve 
your salary or career prospects. 

For example, just a few years ago, the 
Microsoft Certified Software Engineer 
(MCSE) certification promised large 
salary jumps for IT professionals who 
could boast of having one. While it’s 
still the most popular certification and 
still in demand, so many people have 
the MCSE certification (almost 400,000 
engineers in the U.S.) that it’s become 
more of an entry-level requirement. 

We asked IT recruiters and certifica- 
tion experts for their views on what 
will give you the most bang for your 
buck in the next year or two. We look 
at the top two here, with more certifi- 
cations reviewed on Computer- 
world’s Web site. Most of these are 
top-end certifications that require 
a few years of job experience in 
addition to training. 


lop Se 
Certifications 


Because they’re more difficult to 
obtain, these certifications can in 
crease your salary by 20% to 30%, 
according to Mike Kovatsh, an expert 
on training and certification at Edina, 
Minn.-based Techies.com Inc. 


> Cisco Certified Internetworking 

Expert (CCIE) 

Summary: Introduced in 1993, the CCIE 
helps identify internetworking experts. 
There are five areas in which a person 
can be certified: routing and switching, 
wide-area network switching, ISP Dial, 
SNA/IP, and integration and design. 
Requirements: You must take a two-hour 
computer-based qualification exam 
and a two-day, hands-on lab exam at a 
Cisco Systems Inc. facility. The lab 
exam requires a deep understanding of 
Cisco equipment and general network- 
ing. Training alone is insufficient, but 
it can help, and there’s a suggested list 
of Cisco courses to take. There are 
only two test lab sites, in San Jose and 


in Research Triangle Park, N.C. 

How long it takes to obtain: It could take 
four or five years just to obtain the 
necessary experience to pass the CCIE 
exam. Assuming you’re working full 
time, you might take a year or two to 
study for and take the written test and 
then study for, take and pass the lab 
exam. “It’s pretty typical for half the 
candidates who take the lab exam to 
fail on their first try,” says Ed Tittel, 
vice president of IT certifications at 
iLearning Inc., a training and educa- 
tion provider in Baltimore. 

Supply vs. demand: CCIEs are “few and 
far between,” says Ben Sabrin, a senior 
search consultant at New York-based 
recruitment firm Pencom Systems Inc. 
According to Cisco, there are fewer 
than 3,000 of these certified profes- 
sionals in North America. They're 
especially in demand in the optical and 
networking space, such as at telecom- 
munications firms. 

Average cost: The lab test costs $1,250, 
and the exam fee is $300. Training 
ranges from $1,420 if you self-study to 
$4,100 to $6,300 if you study in a class- 
room, according to Tittel. 

Career benefit: Having the CCIE desig- 
nates you as part of an elite corps of in- 
ternetworking professionals; it’s one of 


63 


the premier IT certifications. 

Salary benefit: CCIEs can expect a It 
to 20% boost in salary, says Sal 

And according to a survey last fall by 
TCPmag.com, CCIE certificate holders 
earn an average base income of 
$115,400 — a $45,500 jump (an almost 
40% increase) over Cisco Certi 
Network Architects, another certi 
fication. They also reported larger 
bonuses, more stock options, more 
paid training and higher job satisfac- 
tion than holders of other Cisco 
certifications. 


> Senior Java Certification 

Summary: Certification programs in- 
clude Certified Programmer for the 
Java Platform, Certified Developer for 
the Java Platform and 

Certified Enterprise 

Architect for Java 2 MORE 
Platform, Enterprise — For more inform 
Edition Technology. ut usetut 
Requirements: The 
programmer track re- 
quires one exam; the 
developer track requires one exam < 
one assignment, plus previous Pro- 
grammer certification; and the archi- 
tect track requires a multiple choice 


+ Woh 

J VVEL 

www.computerworld 
com/cert 


exam, an essay exam and one assign- 
ment. Certifications can be obtained 
from Sun Microsystems Inc., Hewlett- 
Packard Co., BEA Systems Inc., IBM, 
Sybase Inc., Netscape Communica 
tions Corp., Novell Inc. or Oracle Corp 
How long it takes to obtain: You should 
have about two years of experience be 
fore taking the exam. If you have a full- 
time job, it could take six months to a 
year to obtain the certification. 

Supply vs. demand: According to Tittel, 
there are six to seven job openings for 
each Java-certified individual. 

Average cost: Exam and assignment 
costs from Sun range from $150 for 
programmers to $400 for developers 
and $550 for architects. Training 
ranges from $300 to $1,000 for self- 
study and as much as $3,500 for class- 
room-based study, according to Tittel. 
Career benefit: “Getting certified helps 
prove you were able to take your back- 
ground in C++ and marry that over to 
Java,” Sabrin says 

Salary benefit: “You're looking at a six 
figure salary, guaranteed,” says Tittel 
“T’ve heard of individuals doubling 
their compensation as a result of 
obtaining mid- or upper-level Java 
certifications, as compared to their 
precertification incomes.” D 

Brandel is a freelance writer in 
Newton, Mass. 
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Work all day on one Fortune 500 list. And of course, our 


. l salaries are highly competitive. But what 
of the nation’s 


makes working here so spec ial are our 
largest networks. 


: 
family-friendly benefits packages, easy 


going lifestyle, diverse workplace and 


Then go home 


welcoming communities. No wonder 


or wherever. 


we were included in Computerworld’s 
‘100 Best Places to Work’ 

Contact State Farm Human Resources 
at jobopps.corpsouth@statefarm.com 
for information about current positions 
Or visit our website 


° STATE FARM 
at statefarm.com! 
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1421 Knoy Hall 242, West 
Lafayette, IN 47907-1421 
Questions should be directed to 
Professor Jeffrey L. Whitten 
West Lafayette) at phone (765) 
494 5, or on the Internet at 
iwhitten @tech.purdue.edu 
Purdue University is an equal 
pportunity, affirmative actior 
employer 


COMPUTER 


NOVASOFT INFORMATION 
TECHNOLOGY CORPORATION 
& ENOVASOFT INCORPORATED 


Software consulting firm and 
web development company is 
seeking qualified professionals 
(bachelors degree +) for the 
following nationwide positions: 


Members of Technical Staff 
(Analysts Programmers, Systems 
Analysts, etc.) 

* Web Developers (Java, ASP. 

Coldfusion) 

* Web Masters 

* ERP/CRM Professionals 
(Siebel, SAP, BAAN) 

* Client Server (Oracle, C, C++ 
VC++, VB) 

Administrators 

* Systems Administrators 
(UNIX, Sun Solaris, HP-UX, AIX 
Windows NT, Cisco) 

* DBA's (Oracle, Sybase, SQL 
Server) 

Corporate Staff 

* Technical Recruiters/Data 
Process Professionals 

* Sales/Account Executives 

¢ HR Professionals 


Excellent salary and benefits 
package available. Fax or e-mail 
resumes to: 
HR Department 
NovaSoft Info Tech. Corp. 
or eNovaSoft Inc 
Fax: 609-588-5577 
E-mail: NovaSoft: resumes 
@novasoftinfo.com 
eNovaSoft: info @ enovasoft.com 
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HEED 


HIGH TECH CAREER 


OPPORTUNITIES 


Siemens Information and 
Communication Networks, Inc 


Siemens Information and 
Communication Mobile, Inc 


Siemens Carrier Networks, LLC 
Siemens Enterprise Networks, LLC 
Optisphere Networks, Inc 


Software Engineers/Technicians 
+ Communication Engineers/Technicians 
+ Test Engineers/Technicians 
«Customer Service Engineers/Technicians 
*Field Engineers/Technicans 
*Telecommunications Engineers 
Optical Engineers/Technicians 
Programmers/Programmer Analysts 
Systems Engineers/Systems Analysts 
“Wireless Engineers/Technicans 
* Network Engineers/Technicans 
Design Engineers 
Technical Support Specialists 
Hardware Engineers/Technicans 
+Proyed/Produd Managers 
+ Database Administrators/Design Analysts 
+ User Support Specialists/Supervisors 
And a range of other (T and IT support positions 


Email (preferred) your resume te 
siemens(Dresume.isearch.com 
Siemens, PO Box 92171, Los Angeles, CA 90009-9998 

- Opry Eloy FOE WE/T/V 
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May 20-22, 2001 
Westin Mission 
alSMaieselat 
Rancho Mirage, CA 


Computerworld’s 
rauiiam epee 
Perea ae lee 
technologists who 
understand business 
needs, take calculated 
risks and lead 
through innovation. 
y are vice 
presidents of IT, 
CIOs, IS directors 
and business man- 
agers honored as 
Computerworld’s 
Premier 100 from 
a wide swath of 
vertical industries. 
When you attend this 
unique conference, 
you'll hear proven 
examples of how 
these IT Leaders 
have advanced their 
organizations 
through innovative 
leadership. 
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12:00 - 5:00pm 
GOLF TOURNAMENT FOR 
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h. Computerworld 
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OLD-FASHIONED WAY: 
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APPROACH TO E-BUSINESS 
Ralph Szygenda, CIO, 
General Motors 


9:00am 

PANEL 1: 

IT’S MISSION IMPOSSIBLE: 

GLOBALIZATION AND E-BUSINESS 

Panel Moderator: Sarwar Kashmiri, 

CEO, EbizChronicles.com 

Ready or not, the Web is making the globalization 

of business a reality. But pursuing a global strate- 

gy means more for IT than creating a worldwide 

network infrastructure, setting up foreign distrib 

ution or hiring IT talent abroad. So how does an 
‘© about getting a grip on strategy to 

support the enterprise's global business objec 

tives? Our panel will share its collective interna 

tional experience to send you off with a host of 

good ideas along with an action-item list 


10:00am 
BREAK 


10:15am 
OLD RULES, NEW GAME: 
@® BUILDING PRUDENTIAL'S 
GLOBAL E-STRATEGY 
Irene Dec, VP International In- 
vestments, Prudential Insurance 


11:00am 
PANEL 2: 
THE NEXT WAVE OF 
E-COMMERCE: CONNECTING 
YOUR CUSTOMER CHANNELS 
Panel moderator: Kevin Fogarty, 
Business & Technology Editor, 
Computerworld 
omy has arrived with a 
nbers of Cus: 
nent (CRM) systems 
sparate CRM appli- 
workflow to get that 
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PANEL 3: 

WIRELESS WARRIORS AND THE 
CHALLENGE OF M-COMMERCE 
Panel moderator: Bob Brewin, 

Senior Editor, Wireless Technology, 
Computerworld 


works 


pose as 
and mobil e best prac 
tices in deploy e merce applica 
tions that reso irity concerns and loca 
tion-service controversies? Which applications 
make the sense for wireless LANs? How 
do you choose an architecture that works well 
for your user base? How solid is the Wireless 
Application Protocol (WAP) standard for uni 
fying handheld devices and wireless networks? 
Our panelists will examine these core ques- 
tions through the lens of their own experience, 
coming up with some practical recommenda- 
tions for the next wave of wireless warriors. 


3:00pm 
BREAK 
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Register today for Computerworld’s 
Premier 100 IT Leaders Conference 
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Alan Guibord & Maryfran Johnson 
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CHANGING ECONOMY 


Doug Busch, CIO, Intel 


9:00am 

PANEL 4: 

THE HEAVY HAND OF UNCLE 
SAM IN ONLINE SECURITY ANI 
PRIVACY PROTECTION 

Panel Moderator: Alan Paller, 
Research Director, SANS Institute 
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10:15am 
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Officer, Nationwide) 
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IBM E-BUSINESS HOSTING™ GAVE THE NBA AN ASSIST WHEN THEY WANTED MORE 
FROM THEIR WEB STORE. WE DESIGNED INDIVIDUAL TEAM SHOPS, WHERE FANS 
CAN BUY GEAR FROM EVERY NBA TEAM. WE CREATED AN ENHANCED CUSTOMER 
SERVICE CENTER AND A REWARDS POINTS PROGRAM THAT ALLOWS FANS TO GET 
EVEN MORE STUFF. AND WE HELPED TO BRING THEIR NEW YORK CITY STORE 
RIGHT TO THEIR FANS VIA A LIVE FASHION SHOW WEBCAST. ? 
E-BUSINESS HOSTING AND NBA.COM. ONLY FROM IBM. 


Cail 1800 IBM 7080, ask for host or visit ibm.com/e-business/hosting 
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IT Careers in E-Business 


When strong businesses look to the Internet as a new channel for sales 
and distribution, the results tend to add strength. For some e-retailers, < ent. Siemenecmn 
the foundation for the business was set early in the evolution of online ' 
sales. The result for these companies tends to be an operation that is 
succeeding as a business and that is breaking down walls in terms of 


creating new technologies and systems. 
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Sun‘s 2001 Worldwide Java Developer Conference 


Code outside the lines: ru 


Get the blueprints for 


smart Web services at Wi S 
the JavaOne” conference. in ome 
: Real Power 
Discover the uniimited potential of Java™ technology to fuel 


your creativity. Learn from the world’s top experts in java at rhic.com/win 
s 


technology on how to build smart Web services that 
connect the largest servers to the ubiquitous desktop to the 


tiniest devices. At the JavaOne conference, network with top 600 horses — to be exact. 
developers, see real-world solutions and learn the latest Loa in at rt ym right now. and enter for a chance 
from Sun on the world’s leading development platform. 
at }] adventure for two 

Free your mind and your code will follow. behind the wheel. We're also giving re _ —_ 

A tor Speedway. 
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COMPUTERWORLD'S 15TH 
ANNUAL SALARY SURVEY 


This in-depth look at the IT salary 
picture is widely anticipated and 
ardently discussed by the 
thousands of Computerworld 
readers - and their colleagues, 
bosses, and employees. This 

survey provides facts to help 
developers and analysts know where 
they stand and should be in the 
battle for higher pay. 


Each week, more than 935,000 
executives and professionals read 
Computerworld for the latest news 
and analysis of the technology that 
powers today's leading enterprises. 


The Annual Salary Survey for IT 
Professionals is an ideal vehicle for 
delivering your recruitment 
advertising to this high-value poo! 
of business-oriented IT professionals. 


Issue date: September 3 


Space Due: August 22 


Materials Due: August 30 
For more information, call 


Janis Crowley at 1-800-762-2977, or 
email janis_crowley@itcareers.net 
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their futures depend on it 
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As many as 80% of tec hnology projects cost more 
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Spinning the Street 
BY PIMM FOX 
than they return. Companies are saving millions by Y , 
; : : Web-based supply chains and 
using portfolio management techniques to identify 
itis oe : ¢ customer management systems 
and ax unprofitable projects before they're in the : 


red. BY ROBERT L. SCHEIER 

Inside the CIO Brain Trust 
\s CEO of The Research Board, Peter Sole com bottom li ne 
mands the attention of 100 of the most influential 30 Leadership 


ClOs. In an exclusive interview, Sole talks about 


are among the projects smart 


firms are touting on Wall Street. 


eee ; Venture capitalist Gus Tai 
how these leaders are shifting from cost savings to 

. : reveals how to maximize pay 
speed and agility as key metrics for measuring 


; back when buying technology 
business value. BY MARYFRAN JOHNSON Se a 


from an unproven start up. 


: Security 

risk & reward on the web Forget negotiating with would 
be extortionist hackers,writes 

A Watched Worker \nn Harrison. It never pays oft 

Fear of six-figure lawsuits has companies racing to moni 

tor their employees’ e-mail and Internet use. But experts Take-Aways 

say the best defense starts with an explicit privacy and Balance Sheet: Holborn Corp.'s 

usage policy. We tell you why you need one and how to new $85,500 Web site. Also, see 

craft it. Go to www.computerworld.com/roi for the story. what new ROI stories can be 


found online. 
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TAKING STOCK 


[HERE SA SCENE IN THE 1940 MUSICAL Babes in Arm 
in which 18-year-old Judy Garland turns to her co 
star, a cash-strapp¢ d Mickey Rooney, with her one 
good idea for raising some much-needed money 
“Come on, kids, let’s put on a show!” Garland sings 
a In the Internet economy's opening act, plenty of 
compani s applied the same kind of idealistic think 
ing to their technology investments, particularly 
Web commerce initiatives. The greater the number 
of showy bells and whistles on a site, the thinking 
went, the greater the number of glitz-hungry cus 
tomers who would show up to click and buy. Sales 
and efficiency rates would soar, costs would decline sharply and companies would tap 
dance their way to greater profitability e Cut! a The scr ipt has changed dramatically. 
Now it’s Act 2. Daydreams are out. Dis« ipline is in, Today, smart organizations, suc has 
ING Americas and the U.S. De partment of Housing and Urban Development, ar 
applying the same kind of financial scrutiny to technology projects that they apply to 
other capital-intensive investments, writes Robert L. Scheier in our cover story about 
calculating and auditing IT project risks and rewards (j »). The payoff for some firms 
is savings of millions of dollars per vear. Disc ipline is also a re quirement for compa 
nies racing to develop Internet and e-mail monitoring software as a means of enforcing 
privacy policies. As companies expand globally, they must also continually track and 
implement the regulations of other countries, whose privacy laws, like those of the ULS., 
are ever-changing (www. i).@ And the script isn’t the only thing chang 
ing. There’s also a chorus line of new and unproven technology play rs. In this issue, 
columnist Gus Tai offers tips on how to increase your odds of choosing a rising star (page 
30). w Also, in an exclusive interview with Computerworld Editor in Chief Marytran John 
son, The Research Board’s executive director, Peter Sole, tells of how companies are shift 
ing their meaurement focus from simple cost-cutting to concentrate on speed, agility 
and innovation (page 24). a These are just a few of the highlights you'll find in this issuc 
of ROI, where bottom-line thinking about technology aims to help you deliver more than 


short-term showmanship. The goal is a major hit with a very long run 
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WE DIDN'T JUST JUMP ON THE 
INFRASTRUCTURE BANDWAGON. 


WE BUILT IT. 


It’s time to set the record straight. Long before our n add he word 
“infrastructure” to their vocabulary, we were busy c ing it 2 we first launched 
Unicenter; it has become the de facto glo | standard ing eBusiness 
infrastructure. But we didn’t stop there—we’re also the world lead Sect and storage 
software. Every day, our software handles over 180 million transactions, prote $50 billion 


in wire transfers and stores 40 million security exchanges. Expertise dé ‘t happen 


overnight. It’s taken 25 years of hard work and leadership to get t the best. So 


when we say you can trust every one of our 18,000 employees around the world to deliver 


the software and service that your eBusiness’ success depends on, we really mean it 


Computer Associates 


ca.com 





TIPS, TACTICS AND TIMELY INFO ABOUT TECHNOLOGY PAYBACK 


cybrarians 
Office Libraries 
Check Out 


ITH SO MUCH INFORMATION AVAILABLE 
WwW: free on the Internet, is your corporate 
information center — an office of librarians who 
buy high-priced content — really worth it? 

The answer is an overwhelming yes, accord- 
ing to Outsell Inc., a firm in Burlingame, Calif. 
that studies the information industry. 

Outsell’s analysis of data from 4,700 
respondents showed that when corporate end 


to UC hy ] ssue users got beneficial data from their information 


centers, they either boosted revenues by an aver- 


Biometrics’ age of $801,585, cut costs by an average of $2, 


or saved an average of 12 hours 
Bu bble Bu rsts “The lesson here is not that every interac- 
tion with the corporate library is a moneymaker 


or a dollar-saver, but when people do turn to the 


IG-NAME VENDORS SUCH AS MICROSOFI 4 
; : library to support their decisions, quite often, a 
Corp. and Dell Computer Corp. have 


lot of money is on the line,” says Outsell 
zealously endorsed biometric authentication 
: 5 researcher Mary Corcoran. 
those keyboard devices that capture a fin 
gerprint scan to identify users before they can 


get into a system. But don’t buy the hype, 


says Cambridge, Mass., research firm For use it or lose it 
rester Research Inc. , because this is still early ® ® 

adopter technology. It will be another thre¢ Cl icki ng With 
years before user experience and the tech 


nology are mature enough for effective imple Customers 


mentations, savs analyst Frank Princ« 


bet 
<— 
bene 
ase 
QO... 
© 
‘a 


Forget fancy electronic wish lists and e-mail 
For one thing, the finger . : 


ere eye gift reminders, The Web site bells and whis 


Authenticate Users 
Passwords 92% _— Certificates 24% 
Tokens 26% Biometrics 4% 
Smart cards 24% Other 10% 


PCE Rte) 


print re aders are at least 25° , 
tles that online buyers use most often are: 
more expensive than smart ? 


card readers. And both ar¢ 1. Close-up images of products 
more expensive than pass ae, Sot ; 
: 2. Stock availability information 
words, which don’t need spe : 
es allowed ° > = . ° 
cial hardware. 3. Product comparison reviews 
It will take until 2003 for the ROI of bio . 
4. A search function 


metrics to become clear, Prince says. Also, 


“when those consumers realize that digital 5. A toll-free number for customer service 


fingerprints leave trails that can be used in 
COMPILED BY gent Source: PricewaterhouseCoopers, Columbus, Ohio 


MITCH BETTS court, a privacy firestorm will ensue,” he says. Base: 547 online shoppers 
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dynamic pricing 


Railroads Take Cue From Airlines 


OU KNOW ABOUT YIELD MANAGE 
Y:: nt, even if vou don’t know the 
term. It’s how sophisticated computer pro 
grams allow the airlines to charge different 
rates for seats (depe nding on the laws of 
supply and demand) to optimize revenue. 
Yield management has already spread to 
the hotel industry, and ac cording to Mer 
cer Management Consulting Inc., it should 
become an important force in the railroad 
industry, too. 

Railroads are losing market share to 
truck competition and have already milked 
the cost efficiencies from deregulation and 
mergers, says Gilles Roucolle, a Montreal 
based Mercer consultant. “There is a great 
opportunity for railroads to now shift their 


] 
attention to grow the revenue line prot 


talking heads 


itably,” Roucolle says. And that means rev 
enue-enhancing technologies such as 
demand forecasting, business intelligence 
and dynamic pricing 

But pricing isn’t the only area that 
needs improvement. Corporate trans 
portation and logis 
tics managers 
the rail industry’s 
biggest customers 

still look for the 
cheapest price on 
their freight bills, 
but they’re also 
interested in value-added k GISTICS Services, 
on-time performance and transit time. “The 
customer equation Is getting Inc reasingly 


complex,” Roucolle says 


‘The world's total production of information amounts 
to about 250 MESA bytes for each man, woman and 
child on Earth. It is clear that we are all drowning in da S@da of 


information The challenge is to learn to SWIM in that sea, 


rather than drown in it.” 


— PETER LYMAN AND HAL R. VARIAN 


(www.sims.berkeley.edu/how-much-info/) 
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the list 
Barriers 

To Mobile 
E-Commerce 


10 


Narrow bandwidth 


means slow downloads. 


Small screens with 


tiny keypads. 


Batteries run out 
(especially for color 
devices with big 


screens). 


Dead cells, bad recep- 
tion and opposition to 


cellular towers. 


Lack of standards. 


Security and privacy. 


Expensive infrastruc- 
ture and skimpy 


revenue. 


Limited applications. 
Beyond checking 
scores, stocks and the 
weather, what else is 


there? 


Distractions. Some- 
times you have to look 
at the road or watch 


where you’re walking. 


Customers are turned 
off by the gap between 
hype and reality. 


Source: Giga Information 


Group Inc., Cambridge, Mass 
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network oops 
All-Too-Common 
Security Flaws 


St ccmastach or FBI spECIAL AGENT WHO 


TOP LINE 


investigated network break-ins, says he’s worried 
that any downturn in the economy will lead to cut 
backs in corporate security. That would be a big 
mistake, savs Williams, now a consultant at $3 Net 


works LLC, a professional services firm in Oak 


brook Terrace, Ill. He cites the following hidden 


security traps calling home 


@ Overdependence on firewalls or other products, Setting Up Shop in 


without monitor ing the network for intrusions 


Small-Town U.S.A. 


security managers. They just don’t have the tim« i OOKING TO BUILD A NEW CALL CENTER TO HAN- 


or skills 


# Network administrators pulling double duty as 


dle phone and online customer contacts? Sure, 

: you could do it in popular big cities such as Dallas, 

= @ Lack of companywide security training Chicago or St. Louis. But consider building in some 

unlikely places to tap into the labor pool of small-town 

# Overlooking security on telephone switches, voice America, suggests Andy Shapiro, a location consult- 
mail and modem banks ant at Deloitte & Touche Fantus in New York. 


More and more call centers 


MU eee ue eee me rd are sprouting up in towns like 
eee eur emo tg Stevens Point, Wis.; Marquette, 
50%-59% 131 26.7% Mich.; and Rockland, Maine. 


60%-69% 125 25.5% Companies that enter the market 
heads up : P 
7O%-79% 122 24.8% early enough “are finding that 


The CEO Agenda ee i i they can become the ‘employer of 


choice’ in these small communi- 
(Total responses: 491) 


Source: March 2001 survey by Support- 
industry.com, Santa Barbara, Calif. wave, he adds, may blossom 


Top CEO issues, in order of importance: ties,” Shapiro says. The next 


1. Increasing profitability 
< ; along the U.S. border with Mexi- 


Business growth co — from Pharr, Texas, to Sierra Vista, Ariz. — as com- 
E-commerce = b 

: . of available, low-cost labor in North America. 
Improving IT performance Research Data Design Inc. recently opened a bilin- 


gual call center in Las Cruces, N.M. And Tele-Servic- 


panies seek access “to one of the few remaining pools 


Strategic/ cultural change 
- 5 ing Innovations Inc. has opened a series of call cen- 


Mergers and acquisitions ters stretching across rural Idaho. The latest one is in 
a former hardware store on Main Street in Jerome, 


Source: Compass America inc., Reston, Va.; 2000 survey of 412 global CEOs 
Idaho, population 7,000. 
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are you ready? resource alert 
By 2005, MOre than half of the Web Sites for 


Internet’s users Won ' be native Busy Executives 
Spe€d kers of En g| ish. CEO EXPRESS (www. ceoexpress.com): A business 


portal created for CEOs. 
MEANSBUSINESS.COM (www. meansbusiness. 


com): A unique database of more than 20,000 


% key ideas from business and management 
books. Try the free newsletter. 
KNOWLEDGE@WHARTON (hitp: / /knowledge 


wharton.upenn.edu): The latest business and 


Native English Nonnative 
speakers English speakers 
147.5 million ~ 198 million 


management insights from The Wharton 
School at the University of Pennsylvania. 
: oe O “THE RAPIDLY CHANGING FACE OF COM- 
(Projected) 5/] % PUTING” (www.compaq.com/ rcfoc): An eye 
opening, accessible newsletter about technol 
ogy innovations. It’s weekly, and it’s free. 


Source: Computer Economics Inc., Carlsbad, Calif. 


Delivering Productivity and Connectivity 


in Distributed Computing. 


ee Late 


workflow analysis, 
reporting Cr eTore ltl ae) ae | 
PT Mariel: Meee) colle eas 
Porte tals workload management 


+1.888.514.3333 ») 
ra elie tomer nce 


PLATFORM 


www.platform.com 


= 
WWW.COMPUTERWORLD.COM/ROI MAY.JUNE 2001 t 





V) 
Li 
ant 
—_ 
O< 
= 
Lid 
am 
ama 
© 
So) 


BY THORNTON A. MAY 


Return on Rebellion 


A revolt won business a hand in IT spending. Now, the front line is the future 


N FRENCH, “ROI” MEANS “KING.” YET “RETURN ON 
investment” — that technique designed to allow non 

IT people to evaluate the relative worth of IT projec ts 

isn’t a noble or particularly effective undertaking, espe 

cially as « urrently practiced 

Business people have always been interested in how IT 
dollars actually get spent. \ former chairman at a major 
Detroit auto manufacturer was rumored to have said, “If | 
had all the money we spent on IT back, I could hav bought 
Toyota and Honda.” So those cavalier “Let them eat cake” 
days when IT executives delivered what they wanted, when 
they wanted, independent of business needs, are behind us 

The pendulum has swung from IT as ruling monarch 
of how money gets spent to IT as puppet to the whim of an 
unruly mob of business people, blindly giving out everything 
that’s asked for. Of course, we all know that any resource 
allocation technique must reflect the needs of the business. 
Jim Griffin, former director of IT at Geffen Records (part 
of Interscope Records Inc. in Santa Monica, Calif.) and 
currently CEO at Cherry Lane Digital LLC, is famous for 
oversimplifying IT resource allocation to its political base 
elements. As he puts it, “If your budget is getting cut, it’s 
because you are having lunch with the wrong people.” 


Today, we find our companies on the « usp of making 
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critical infrastructure investments that will drive the eco 
nomics of information management and support (or not 
support) their relationships with suppliers and customers. 
Painter Jackson Pollock told us, “Each age finds its own tech 
nique.” Senior management teams must now develop their 
own techniques to greenlight IT expenditures. 

New techniques of financial behavior are desperately 
needed in the areas of security, data and privacy protection, 
where IT investment techniques tend to be reactive. Bud 
get requests are denied until an incident occurs. The bot 
tom line, quite literally, is that we are doing it wrong. 

General Electric Co. CEO Jack Welch, speaking to 
financial analysts recently, explained that despite the soften 
ing in the economy, the investment community wouldn’t 
see “one ounce of slowdown in technology spending” at GE. 


Rather, he said, “This is the moment to widen the g 


5S 


ap.” 
One way your company can widen that gap is by look 
ing at not only how much you spend, but also how you make 
spending decisions. Financial techniques of the past fund 
ed technology initiatives by focusing on managing the busi 
ness rather than creating what the business will become. We 
invested in technologies that solved today’s problems rather 
than the problems of tomorrow. The true revolution will 


occur when we focus on the future instead of the past. ROI 
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ARIE hd Se for Customer-Tailored Performance 


Remember when you were 
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performance? 


These days, a lot of people are monitoring your 


network performance. They're calied Users. And 
they have some very definite opinions about what's 


acceptable performance. The real question is how 





exactly do you deliver all the performance your 

network is capable of? The answer is Visual IP 

InSight” It gives you a look at every kind of IP 

access — dial-up, VPN, DSL, you name it- and also 

lets you customize reports, validating the 

performance of each and every one of How much does 
them. Real-time monitoring lets your network really 
you troubleshoot on the fly for have under the hood? Find 













| UpTime® the ultimate in service level out with our IP InSight demo 
at www.visuainetworks.com/ 
ipiroidemo and get ali the 
performance your net- 


janagement. And IP InSight's 
Trinity — 9 
Customer Care Suite gives 
IP InSight™ your help desk ail the tools they 
: work has to give. 
need to do exactly everything 


CE tell tg their name implies. 
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? www.visuainetworks.com/ipiroidemo 
Check out our Web-based IP InSight demo at 1-800-240-4010 


www.visualnetworks.com/ipiroidemo or visit us at N+/ UK: +44 (0) 118 988 0242 
Booth 5523 to experience IP InSight for yourself. Asia/Pacific: 65-430 6786 


©2000 Visual Networks Technologies, Inc. All rights reserved. Visual Networks and Visual UpTime are registered trademarks 
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BY PIMM FOX 


Wall Street’s New Darling 


Smart companies are talking up their IT initiatives to win investors 


ROFESSIONAL FINANCIERS AND INDIVIDUAL INVESTORS 


bac k a 


use many measures to decide whether to 
company. Some stare at charts; others read annual 
reports or talk to senior management 
But increasingly, they're all getting the same message 
IT is a key component of a company’s value 
“What you are seeing is companies using supply-chain 
management and cost reduction because it is demonstrable 
to investors,” says Peter Sealey, a prok ssor of marke ting at 
the University of California at Berkeley. That's becaus« 
using IT to take two or three percentage points out of the 
cost structure of an auto plant or grocery store chain is 
something Wall Street analysts understand, he says 
Other companies are following suit. For example, 
major airlines are touting their technology investments in 


hopes of being rewarded with stock values similar to thos¢ 


of high-tech companies like Microsoft Corp., Sealey says 
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Other brick-and-mortar firms are showcasing their IT as a 
way of countering dot-coms. “Fortune 500 companies ar¢ 
looking at the incredible multiples these technology-driv 
en companies command on Wall Street and saying, “We 
own the assets. We want some of that, too, ” Sealey says 

But such IT showcasing represents a distinct about-face 
for nontechnology companies, which traditionally have 
been tight-lipped about their IT strategy and operations 

Fortune 500 companies used to view their IT infor 
mation as proprietary, but with the success of companies 
such as Wal-Mart and General Electric, senior manage 
ment teams now see IT as a part of the value story they must 
communicate, says one Silicon Valley venture capitalist 
Wall Street analysts and investors now want to hear about 
e-business strategies and what companies are doing with IT 
to tighten relationships with trading partners, he says 

Chis emphasis could be a generational shift. “We have 
the first president of the U.S. with an MBA, and companies 
have managers who have grown up with technology. They 
understand the PC and how it changes productivity,” says 
Sealey. “Heck, you even have Jack Welch, GE’s CEO, telling 
Wall Street that IT is instrumental in creating value.” 

But William Mahoney, executive editor of Shareholder 
lalue,a Philadelphia based investment publication, says he 
sees corporate trumpeting of IT as part of an overall trend 
toward more informed investors. “The fact that nontech 
companies are focusing on technology isn’t the issue. The 
whole notion here is to provide valuable information to the 
stock market in terms of what drives a company’s value,” 
Mahoney says. “The mind-set now is that the more the 


investment community knows about strategy and key 


programs the value drivers the better.” 

But playing up IT doesn’t always work. “Growing top 
line revenue and bottom-line earnings are what matter,” 
he says. “Professional investors have pretty sophisticated 
methods for predicting a company’s future results and aren't 
moved by billboards or ads that broadcast a company’s IT.” 

Yet despite IT’s open-ended role in making firms more 
competitive, expect to hear more of them trumpeting their 


IT advances. After all, it beats talking about layoffs. —_ ROI 
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Over 30 re) an web surfing 


ds at work is not 
Business Related.* 


Is this part of your employee 
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The only true 
“plug and play” Internet access management appliance. 


wi Complete flexibility allows precise tailoring and enforcement 
of Internet acceptable use policies. 
FREE : : 


Internet Acceptable Use a Monitors and blocks access to non-productive, inappropriate, 


Policy whitepaper at: sexually explicit or racially offensive sites at the 
877-972-0100  www.stbernard.com/iap.htm administrator's discretion. 


Billions in lost productivity. Potential lawsuits for allowing access to pornographic or racially offensive sites. Downtime from networks over- 
loaded with broadband web surfing. It's time to draw the line with iPrism™ — the only “plug and play” Internet access management appliance. 
iPrism can be configured to block access to over 60 inappropriate or non-productive site categories. More than 8000 new sites are found, 
categorized, and reviewed by iPrism analysts weekly. iPrism's precision control is unequaled in letting you determine on a group-by-group or 
user-by-user basis exactly which site categories can be viewed. iPrism’s time-slot 

editor even allows access control by time of day. For complete details, call 


877-972-0100 or visit www.stbernard.com. iPrism means business. Qc ERNARD 
Software 


16882 West Bernardo Dr., San Diego, CA 92127 eee? 
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“IDC Research (Prism is a trade 
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underperforming IT projects? 


Need to control your 
unbalanced, runaway or 


isk © 


Try looking at them as a portfolio of 


investments — and let the projects that 


don’t pass these three payback tests take a fall 


re. CRT A 


Quick RIDDLE: WHAT'S THE DIFFERENCI 
between a 250,000 square-foot ware house 
in Singapore, an upgrade to your firm’s 
Web site and 10,000 shares in Genentech? 

The answer: Nothing. They're all 
investments you make after weighing their 
risks and returns. As conditions change, 
you buy, S¢ ll or hold to get the overall ratc 


of return you seek. 


Except, of course, when 


PHOTOGRAPHS 


it comes to computer systems. Executives 
intimidated by technical mumbo jumbo 
don’t ask tough questions about deadlines, 
deliverables and costs. Technical staffs 
don’t factor in the costs of long term 
training, maintenance and support 

And because information techne logy 
is somehow “different,” IT projects are 


rarely audited to see if they deliver the 


BY MARK 
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HOOPER 


a oe 


financial benefits they promised. 
Result: When the true costs are added 
up, as many as 80 


o of technology projects 


actually cost more money than they 
return, savs I 1roz Dosani, vice preside nt 
of Mercer Management Consulting Inc. 
in Atlanta. “It’s not done intentionally,” 
he says, “but the reality is, the costs are 


always underestimated and the benefits 


are always overestimated.” 
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Windows 2000 ADVANTAGE 
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POINT OF VIEW COLUMNS > 


Agility Don't blame me, I'm only the 


As applied to the computer industry, the : 
concept of agility takes on a new meaning. Working operating system 


together, Compag and Microsoft are constantly striving Time after time, the failure to communicate business goals 
to embody that concept. and the misuse of information is blamed on the operating 
system. In his debut column, Chris Koontz examines why 
these failures occur and makes recommendations for 
ARI : avoiding them. 


TECH EDGE For the full story, visit: www.w 


The alleged Active Directory security flaw 

it was reported that Microsoft Windows 2000 

Active Directory had a security problem relating to . 

the loss of certain group information. Q&A > 
www.windows2000advantage.com/tech_e 


03-12-01_visual_s 


& 


Chris Koontz shares his in-the-trenches 
experience 


New Windows 2000 Advantage columnist Chris Koontz is 
E-business Practice manager, Parks & Company, an e-busi- 
ness and technology consulting firm located in Charlotte, 
N.C. In this position, he has gained a wealth of first-hand 
industry Standard Server Group, discusses what knowledge while working intimately with multiple clients on 
users expect from their servers. Microsoft Windows 2000 implementation projects. In this 
om/qé interview, he shares that knowledge with executive editor, 
Windows2000Advantage, Bruce Hoard. 


Compag server exec reviews market trends 
Hugh Jenkins, director of marketing for Compa s 


For the full story, visit: www.wind 
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COLUMNS 
Defining enterprise class: |s Windows 2000 ready? FEA TURES > 


Many different elements comprise true m . . . 
enterprise class computing. To determine if Windows Windows 2000 ships with key middleware tools 


2000 fits this elusive bill, Aberdeen Group s Tom Manter for linking, managing distributed applications 

takes a detailed look. 

www.windows2 2 ¢ 7 With Windows 2000, Microsoft has for the first time bundled 

04-02-01_enterprise_cias many middleware capabilities into the operating system 
itself as tightly integrated application services, dramatically 
increasing their performance, reliability and manageability 


CASE STUDIES while cutting costs for customers. 


RadioShack, Starbucks blazing Commerce 
Server 2000 trail For the full story, visit: 


features/04-1€ ke 


Before Microsoft s Commerce Server 2000 hit the street 
it went through an extended beta testing trial with top- 
tier companies: RadioShack.com and Starbucks. 
www.windows2000advantage.co 
case_studies/01-22-01_commer 


www.Windows2000Advantage.com/300 






CASE STUDY > 


Ebone Streaming Media Service Showcases 
Windows 2000 and Windows Media Services 
in a Compag Environment 


Streaming media services delivered via the Internet are an increasingly 
powerful business resource for conducting live meetings, distributing pro- 
motional and collateral video, and communicating with employees and 
staff around the world. This past fall, Ebone, Europe s original and most 
experienced data-only broadband optical and IP networking company, 
entered into an agreement with Microsoft and Compaq to debut the Ebone 
Streaming Media Service across Europe using Microsoft Windows Media 
Services operating under Windows 2000 on Compag servers. 

Formerly known as GTS Broadband Services, Ebone is using its expan- 
sive fiber-optic Internet backbone to offer streaming media services to the 
14 countries and 38 cities that its 12,500-mile European network currently 
serves. Ebone also links more than 25% of all Internet users in Europe and 
nearly 10% of all global IP routes. The network is directly connected to 
North America via Ebone s own trans-Atlantic fiber-optic cable, which is 
expected to be operational in the first half of 2001. 

Ebone s end-to-end service, enabled by its partnership with Compaq 
and Microsoft, removes the customer s need to manage the hardware and 
software requirements of a complex streaming media network. It does this 
by merging optimized server technologies with dedicated, in-house techni- 
cal expertise. 

The Compaq-Microsoft partnership has played a key role in enabling 
Ebone to offer data encoding, asset management, digital rights manage- 
ment, scheduling, publishing management and technology consulting serv- 
ices _ all from a single source 


For the full story, visit: www. 


QUOTE OF THE WEEK > 


“The Windows 2000 toois we have, such as 
BizTalk Server, have allowed us to seamlessly 
integrate into the Sun Solaris-Oracle solution 
our fulfillment partner uses.” 


nology officer 
Haystack Toy Co 


SPECIAL ADVERTISING SECTION 


What is Windows 2000 Advantage? 


The mission of Windows 2000 Advantage is to become 
your primary source of timely, useful information for planning 
and implementing Microsoft Windows 2000 on Compag solu- 
tions and services. 

Windows 2000 Advantage is a Web-only magazine 
because that lets us bring you, the IT leader, great stories 
that apply to your day-to-day work. We fkeep you up to date 
with a weekly e-mail alert so you don tmss a thing. 

Windows 2000 Advantage is underwritten by Microsoft 
and Compag. Its charter is to address the issues that most 
concern IT managers charged with keeping their companies 
on top of the latest and best solutions Microsoft and Compaq 
have to offer. Toward that goal, we offer a wide range of sto- 
ries including case studies, columns and news to provide you 
with information you can tfind anywhere else. 


www.Windows2000Advantage.com/500 


QUICKPOLL > 


Given the uncertain 
economic 
environment, 

how inclined are 
you to implement 
Microsoft Windows 
2000? 


Cast your vote now at: 
www.Windows2000Advantage.com/S00 Base: 189 Respondents 
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Rather than trying to calculate spx 
cific returns on each project, some com 
panies are saving millions of dollars each 


year through a portfolio approach to IT 


I 
spending. They look at their investments 
in TT hardware, software and services 


suc h as training 


as if they were a col 
lection of retirement investments. Some, 
such as stock in a start-up, are high-risk, 
high-return. Others, such as U.S. Trea 
surv bonds, are lower-risk, lower-return 

Within an IT budget, an e-commerce 
project may be a high-risk, high-return 
investment. Infrastructure upgrades such 
as buving a faster network are lower-risk, 
lower-return. This is critical because as 
you're evaluating all propos d spe nding at 
once, it’s easier to cut redundant projects 
or those that don’t help the company meet 
its most pressing business needs 

But moving to portfolio management 
requires firm backing from top manag¢ 
ment, a strong program office to manag¢ 
the process, an energetic and committed 
team to implement the change and a 
strong analysis methodology 

“The same kind of business discus 
sion you have in other capital projects 
[such as building a new factory] works well 
in IT projects, if you just teach the senior 
managem«¢ nt how to ask the same busine SS 
questions of IT,” says Dosani. “What will 
be the real cash flow impact? What is the 
real dollar impact if this initiative is suc 


cessful? And who is committed to [deliv 


ering] that increase in revenue, increase in 
margins or decrease in costs from the busi 
ness side?” These questions should b« 
answered upfront, he says 

ING Americas, an arm of Nether 
lands based ING Group NV. a financial 
services giant with $386 billion in assets 
under management at the end of last vear, 
saved $16 million in 1999, the first vear 
it used the portfolio approac h, savs Steve 
Stecher, executive vice president and ¢ 1O 
The unit, which has annual IT costs of 
about $475 million, achieved thos« savings 
by eliminating redundant projects and cut 
ting costs out of others 

For « xampk ~ ING Americas had three 
competing projects in IT to allow employ 
ces to gain access to multiple applications 
with a single sign-on. These have now been 
consolidated 

The portfolio management approach 
also revealed that several units were look 
ing to upgrade similar applications used 
for making payments to agents and cus 
tomers. Not only is ING eliminating some 
of the competing projects, Stecher says, 
but it’s also looking to use the surviving 
projects as “centers of excellence” that can 
share their systems and expertise with the 
rest of the company 

Even more important, the program 
office played a key role in merging the I 
organizations and systems of companies 


ING Americas has acquired, such as Aetna 


Financial Services, Aetna International and 


Three Critical Business Questions 
That Must Be Answered Upfront 


1 @ What is the real cash flow impact of the IT project? 


a What is the real dollar impact if the IT project is successful? 


3 e@ Who specifically is committed to delivering the increase in revenue, increase 
in margins or other benefits? 
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Portfolio 
Management 
Requirements 


a Firm backing from top management 

#A strong program office to develop 
templates, processes and analysis tools 

w Risk/reward analysis methodology and 


enforcement measures 


ReliaStar Financial ¢ orp The approac h 
has been so successful that the parent com 
pany is considering using it as a model for 
all its European operations 

Phe U.S. Department of Housing 
ind Urban Development (HUD) saved 
close to $36 million in fiscal 2000 and 
2001 through an enter prise wide, port 
folio-based review of projects that could 
be consolidated, savs Debra Stouffer, 
deputy CIO in the agency’s office of IT 
reform 

Strong project management offices 
dedicated to IT portfolio management 
were key for ING and HUD because they 
generate the cost, benefits and risk infor 
mation used to assess individual projects. 

It was even more critical for Stecher, 
who had to help merge the IT units of the 
acquired companies while creating cen 
tralized IT services to be shared by the for 
merly inde pendent business units. He built 
an enterprise program management office 
to avoid the chaos that can accompany 
such ambitious mergers 

In addition to the usual project man 
agement required for all IT initiatives, 
the program office develops templates, 
processes and tools for companywide 
use. But Stouffer warns that tools aren’t 
enough, “You need to come up with poli 
cies [and] procedures” for assessing risk and 
entorc ing the assessment pr CESS, she Say Ss. 


Very few companies assess both the 








Pat 


cost and benefit of IT projects, says ¢ hip 
Gliedman, an analyst at Giga Information 
Group Inc. in Cambridge, Mass. But it 
can be done without cumbersome bureau 
cracies or figuring everything to a statis 
tical degree of accuracy. Merely adding 
the words “as measured by” to a des« rip 
tion of a project's benefits goes a long way, 
he says. If the goal is to improve the pet 
formance of salespeople, says Gliedman, 
their progress could be measured by the 
number of calls it takes to close a deal 
Dosani says that to “separate the real 
izable hard benefit from the fluff,” chal 
lenge the business unit to be accountabl 
for the alleged project benefits. If pro 
ductivity rises 10% in a department of 
100 people, says Dosani, will the business 
unit “actually lay off 10 staff, or are you 
going to assign 10 peopl to a new 
activity?” Many project sponsors back off 
their claims at that point, which is a sig 
nal to the business man gers, also know n 
as the “portfolio managers,” that the proj 
ect is a riskier investment than first 
thought. The aim of this exercise is to test 
specific cost benefit claims for anew proj 
ect. After finding a bogus claim, business 
managers can use the technique to test 
other claims and then change the project, 
kill it or proceed for other reasons. 
Some companies, such as ING, may 
develop common metrics for judging all 
projects. “Whether [the benefit] is in terms 
of improving operating efficiencies or 
eliminating positions with automation, we 
identify those and put in place post 
mortem reviews to make sure the bene 
fits identified are actually realized,” says 
Stecher. The corporate program ottice 
uses these postmortems to improve cri 
teria for evaluating future projects. 
Dosani says most IT managers simply 


underestimate the costs and overestimate 


the benefits of their projects. Common 


pitfalls include failing to account for the 


costs of ongoing training, support and 
changes to processes needed to make a 
system we costs that can add up to 
tive to 10 times the original price 

Once the program office has reason 
ably accurate cost, benefit and risk data, 
the fun begins: Who gets the most money 
and the most control over strategic IT 
systems? 


Both ING and HUD use a multitiered 


system that filters projects up to a high 


level committee made up of business and 
IT managers. The group meets to review 
the status of IT projects against the back 
dre p of ¢ hanging market conditions, cor 
porate performance and new strategic ini 
tiatives. In each case, business managers, 
not IT managers, play a major, if not final, 
role in deciding the fate of IT projects 
For the past three years, ING Amer 
icas’ enterprise program management 


office has tracked projects costing mor¢ 
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ing to impose ne\ 


than $500,000, using internal consultants 
and an IT controller’s office to evaluate 
costs, risks and benefits. After review, 
projec cts pr ICCC d, w ith a rec ommenda 
tion from the program management 
office, to a committee of business unit 
CEOs who make the final call. Projects 
less than $500,000 were under the con 


trol of business unit CEOs. 
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ir own shows 


Because ING Americas has grown so 
dramatically, business unit CEOs are get 
ting authority to approve larger projects, 
says Stecher, although they will still get 
recommendations from a business unit 
program management office. Multi 
million-dollar projects will still be evalu 
ated by the companywide program man 


agement office, for final action by the 
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CEO and CIO of ING Americas 

Infrastructure-related projects that 
affect multiple business units are reviewed 
by a council of CIOs from the businesses, 
which makes recommendations to a CEO 
council that has the fina! say 

At HUD, the initial assessment is 
done by a team that includes staffers re p 
resenting procurement, the CIO’s office 
and the chief financial officer, From there, 
the projec t goes to a wor king group of the 
Technical Advisory Board Executive Com 
mittee and then to the executive com 
mittee itself, That committee, made up of 
about 20 managers from both the IT and 
business units within HUD, meets quar 
terly to decide the fate of projects 

As any manager knows, change is dif 
ficult, and senior management has to be 
ready to enforce the tough decisions After 
all, as Stouffer points out, portfolio man 
agement “affects who gets what money.” 

The issues get thornier when you're 
trying to impose new discipline on man 
agers US¢ d to running their own show $s. 
Stecher has eased the way at ING by pro 
moting employees with top IT, project 
management or change management skills 
trom the firms ING has ac quired and mak 
ing their best tools and processes part of 
the portfolio management strategy. On« 
example: Stecher plans to adopt a third 
party tool used by Aetna to track the 
resources spent on software development 

Even tor the le ading adopters, port 
folio management is a work in progress. 
ING is wrestling with how to fast-track 
critical e-commerce projects while keep 
ing some financial control and ensuring 
compatibility with other ING systems. 

But whatever the challenges, advo 
cates say, well-run portfolio management 
beats the guesswork returns on question 
able projects. Now if they could only do 
something about those fourth quarter 


J 


mutual fund results. ROI 
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Ce adel : Brokat Advisor™ (from Blaze) 


To stay competitive today, your business must adapt faster than ever. Now there’s 
software that can keep pace. Applications built with Brokat Advisor™ (from Blaze) 
can be modified by anyone—no programming skills required. Which makes your 
organization more responsive to changing market conditions and consumer demands. 
And since Advisor-based applications require less intervention from technica 
personnel, they’re more cost-e tive to create and maintain. Ti rn more about 
our revolutionary rules manac t software, request our free white paper 


Just call 1-800-876-4915 or do ad it from the Web at www.brokat.com/anyo 
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THE RESEARCH BOARD IS THE IT COMMUNITY’S PRIVATE THINK TANK. 
IN THIS RARE INTERVIEW, CEO PETER SOLE TALKS ABOUT WHAT’S ON THE 


MINDS OF TOP TECH EXECUTIVES 


As CEO or THE RESEARCH Boarp INC. , PETER SOLE COMMANDS 
the attention of the world’s most influential CIOs. The board, 
which provides research services to the CIOs of 100 leading cor 
porations, is an elite think tank based in New York whose mem 


bers collectively wield tens of billions of dollars in IT buying 


power. The board also offers access to computer industry chiefs, 
who have been known to clear their calendars when summoned. 
The board’s greatest v alue, Sole says, is its ability to pre wide 
these IT leaders with the “time and space to think, to be « hallenged 
and to try out ideas with each other.” Sole hails from a CIO back 
ground himself, hav ing served as the top technologist at Dixons 


Group PLC and at Lloyd’s, the leading underwriting firm in the 


BY MARYFRAN JOHNSON 


U.K. In 1993, Sole founded Wentworth Research, a CIO research 
service in the U.K. and Hong Kong. Gartner Inc., w hich now 
owns The Research Board, acquired Wentworth in 1998. Sole 
went on to hold senior executive positions at Gartner, including 
head of research and advisory services in Europe, the Middle East 
and Africa and head of executive programs worldwide. 

In its 30 years, The Research Board has studiously avoided 
press attention. But in this conversation with Computerworld Edi 
tor in Chief Maryfran Johnson, Sole discusses the most pressing 
challenges confronting CIOs at the world’s leading corporations. 
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ROI: What do you see happening to the role of CIOs as they get 


more deeply involved with strategic business concerns? 


SOLE: Many are not IT 


g 
lists. They are businesspeople with 
IT as part of their portfolio. Typically, they are concerned with not 
just IT, but other responsibilities like logistics, operations, supply 
chain, e-business initiatives. Some control venture « apital funds set 
up to develop relationships between their organizations and lead 

ing-edge companies. They all sit on the executive committee or 
the board, and without exception they are seen as one of the [sen 

ior management] team. Their key responsibilities are making sure 


their companies get maximum benefit from IT investment. 


ROI: How worried are CIOs about their continually evolving roles 
in e-business? 

SOLE: That’s a function of whether they're pursuing these things 
or being pursued by them. The role of the CIO is about risk and 
involvement; e-business is no different. The best ClOs are alw ays 
looking for leverage opportunities around new technologies or 
software They kee Pp their eye on the bleeding edge, either by being 
on it or knowing who’s on it. Some have little groups with exper 

imental work ongoing; some visit the venture capitalists. They all 


have a way of keeping a finger on the pulse. 


ROI: There is such an overwhelming amount of information avail 


able from multiple sources, though. How do CIOs sift through 


wo 
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A COMPANY’S BRAND 
AND ITS VALUES 


ARE GOING TO BE SUPPORTED 


BY THE QUALITY 


OF ITS INFORMATION SYSTEMS. 


it all to find value and insight? 

SOLE: One of the best things a CIO can do is get 
the smarte st, most ¢ xperience d people around 
and compare notes. Ask about the quality of their 
suppliers or their experience with, say, a particu 
lar [enterprise resourcc planning] system What 
we've created [at The Research Board] is an envi 
ronment of trust, which takes years to establish, 
where very senior people can deal with quite sen 
sitive things. You have to be certain that your con 
fidences won't be abused, and you'll get something 


back for what you invest 


ROI: What kind of an impact has all the buzz about the New Econ 
omy had on your members? 

SOLE: Some people talk about the New Economy, and others talk 
about the “Now” Economy. | think it’s really the “Know” Econ 
omy. By that I don’t just mean instant gratification, but rather the 
commercial difference between knowing now and knowing later 
It's about removing the uncertainty. Most importantly, you want 


to remove the time lag 


which costs you money. In the Know 
Economy, you want to know what’s going on, and you want to 
be able to react on the spot, ideally in real time. 

It’s no accident that the currency markets and equity mar 
kets operate in real time, where fractions of a second matter. They 


are setting the standard tor business generally. 


ROI: Is it fair to Say that return on investment concerns are front 
and center with CIOs these days? 
SOLE: That depends on the culture of the company. Some are very 
ROI-driven, where every business pr« yposal must have a traditional 
assessment of ROI. This can be very difficult for major efforts like 
infrastructure [because] trying to estimate the likely return is very 
difficult. It’s like investing funds in new ventures; it’s speculative. 
It’s the judgment around the assumptions that matters. 

ClOs are still having to justify projects the way they always 


did, but I do think we’ve moved away from cost savings as the 





In 1969, we worked ona 
SECRET GOVERNMENT PROJECT 


that became the Internet. 


OHHH, SO THAT’S WHY NOBODY KNOWS WHO 


Back in the ‘60s a small band of computer 
whizzes was hired by the Department of 
Defense to work on the ARPAnet. Or what is 
commonly known as the forerunner to the 
Internet. These visionaries came from 
the legendary research and develop- 
ment company, BBN 

Government work being what it 
is, there wasn’t a lot of publicity 
about this 

Their work did, however, yield 
many firsts. The first router. The first eB 
e-mail message sent over a network 
The first packet network encryption tech- 
nology and more 

Years later GTE acquired BBN and 
invested billions to expand their existing 
infrastructure into a 17,500-mile, Tier 1, fiber- 


optic global network 


Black Rocket 
s Genuity’s 
ness eBusiness Network Platform called 


Network Platform 


Spun off from GTE last year, this power- 
house of Internet services is known today 
as Genuity. With Data Centers strategically 
located around the world and Network 

Operations Centers continually moni- 
toring security and bandwidth for 
serious eBusinesses everywhere 
Innovation is in our blood. And now 
we've combined our expertise in Web 
Hosting, Internet Access, Transport 


and Security into an integrated 


Black Rocket. Our “Rocket Engineers 
can ensure your project runs smoothly from 
the start, allowing you to reduce the cost and 
complexity of building and deploying eBusiness 

To put our 30 years of experience to 
work on your eBusiness, visit www.genuity.com/ 


blackrocket or call 1-800-GENUITY 


WE 


ARE! 


A BRIEF HISTORY 


GENU TY 





classic driver. “Install this, get rid of 


these people, save money.” Those 
days are gone. What people are much 
more interested in now is removing 
friction in the way the company does 


business sharpening up the 
supply chain, right from suppliers 
through to the customer. The big 
emphasis now is on speed and agili 
tv, which of cours« implic Ss innova 

The rules of competition chang 
is industries find new ways of doing 
things. What is making it possible, of 
course, is the Internet and open stan 
dards. It also means our installed bas« 
of systems needs a refurbishment. If 
you have to wait for information 


about what’s happening in your sup 


l l 
IN chain or youl customer base, the 
inethiciency you have In your system 


ROI: Is there such a thing as a system that’s too efficient 
SOLE: There can be a downside with efficiency. As we take the slack 
out, we become mort de pend nt on the system and quality ol 


information in it. It’s a creeping dependence. A good example is 


the supply chain behind the fuel crisis in the U.K. [last year]. It took 
just four days for the country to come to a grinding halt. The British 
government had no idea that the supply chain had become so com 
pressed and hence fragile. Once they stopped things up in the sup 
ply chain, the whole thing drained out in no time. That can hap 
pen to companies. An individual supplier gets into trouble, and if 


you don’t know quickly enough, you're in troubl 


ROK: Does the quality of its IT re late more directly these days to 
how well a company deals with its customers and suppliers? 
SOLE: Increasingly, a company’s brand and its values are going to 
be supported or detracted from by the quality of its infor 
mation systems. If a company is decent, legal, honest and respon 
sive to customers, yet when you phone up no one can tell you 
where your order is or the right price in your market, or whether 
you are one of their top customers, then that’s inconsistent with 
the mission and values they're trying to project. The most vivid 
example of systems being out of line with customer expectations, 


hence damaging the brand, is the recent presidential election. 


© 
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IF ALL ClOs INCREASED 


THEIR FOCUS OF 


ATTENTION TO MARKETING AND 


INNOVATION 


longer it takes to react, the more BY 20%, THAT WOULD BE GREAT. 


Consumer « xpectations are 
being driven by best in class. The fact 
that you’re an Old Economy com 
pany doesn’t make you immune 
from thes« competitive pressures 
Everything you do is a marketing 
statement. Every interaction says 
something about your brand. Cus 
tomers are getting fed up with 
organizations that don’t know who 
they are. What is it Peter Drucket 
said? “Marketing and innovation ar« 
everything the rest is overhead.” 
If every CIO increased his or her 
focus of attention to marketing and 
innovation, say by 20 


per annum, 
I 


that would be great 


RO!: Are Research Board members 
making technology investments to 
match best of class or to drive the 
definition of best in class? 

SOLE: They don’t sit down and say, “Hey, how do we create best 
in breed?” They sit down and say, “How do we do this much bet 
ter {or our customers? How do we change the way we do busi 
ness?” | think the most successful companies are focused on what 
hey’re doing and not worrying too much about the other guys. 
all the time 


They are trying to set the pace. They're trying 


to make their relationship with the customer the best it can be. 


ROI: How are they improving those relationships with customers? 
SOLE: | see ClOs very active in we bifying their businesses and 
opening systems up to be accessible to customers and suppliers. 
So they are all heading in the direction of what I call joined-up 
computing and real-time systems. What I’m also observing is that 
there’s an awful lot more collaboration within industry groups 
than there used to be. The airlines collaborate like mad, while still 
competing. So do many others. All these business-to-business 
exchanges, which must be sponsored and supported by the CIOs, 
are another example of collaboration. A significant proportion of 
Board members are personally involved in the creation of 
exchanges within their industries. It has required them to create 
some ground rules for this level of collaboration, but because IT 
is a collaborative kind of business, that does create a framework 
of trust. Being part of The Research Board, where trust and col 


laboration are part of the culture, also helps. ROI 





Today, power availability 
means business availability 


APC’s power availability solutions prevent the cS i APC was chosen by PC Magazine as one of the “Top 100 
power problems that threaten business uptime : 4 Technology Companies That Are Changing The World” (10/99) 


The electricity that powered lights and copiers yesterday, 
is less than ideal for businesses in the digital world 
today. The slightest fluctuation in power can affect 
sensitive computer equipment behind customer-facing 
web sites, e-commerce and ERP systems resulting in 


costly downtime. 


APC’s award-winning solutions and industry leadership 
continue to set the standard in power protection. APC’s 
services and array of products — from surge suppressors, 
UPSs, cables and racks, to 3-phase UPSs and DC 
power systems — are why over 10 million users put 
their power availability needs, from desktop to data- 


center, in the capable hands of APC. 


TT? 


APC protects more networks worldwide than any other 


vendor. Let APC’s Legendary Reliability” work for — Whether you need a surge protector for a 


printer, UPS for PC or rack-mount server, or 
500kVA 3-phase for a datacenter, APC is your 
one-stop shop for enterprise power availability 


INFORMATIONWEEK si 
iwas named to the 2000 InformationWeek 500 Arc 
| r ranking of the top IT innovators (09/11/00) 


Legendary Reliability 


you. Contact us today! 


All entrants will receive 


Enter to Win a FREE APC Smart-UPS® RM 700! 2 Powe: sai 


Consulting Handbook 
Visit ann prom ape. com Key ” y795z @ - wen 289- _ _— © Fax 401- re ers] 


2001 American Power Conversion. All Trademarks are the property of their owners. APC4AQEF-USa Pc ax: (800) 347-FAXX + E-mail: apcinfo@apcc . 2 Fairgrounds Road, West Kingstor 02892 USA 





Betting on Technology Start-ups 


Here’s how to improve your odds of picking a winner 


BOTTOM LINE 


rs A DILEMMA EvERY CIO HAS TO CONFRONT 


sooner or later: stay with your established soft 


ware vendors, or buy 
unproven start up. You knx w wha 
yoing to get with Oracle, SAP on 
soft, but buving from them can | 
an ther step toward getting 

1 single ri 
start-up, on the 

you Control vour own cic 

open computing environm« 

the right technology may also git 


peulive 


1divantage 

But in an industry where th 
ups hovers around 44 
mine when to go with a start-up 


bet on? Here are 


FOCUS ON PAIN AND PROFITABILITY. Ii vou r 


1 few guidelines 


vendor 


g to take a chance on a start up, the new 


FON 


pain point that directly 


should be addressing a major 


translates into profitability 

For example, in an informal CIO survey my com 
pany, Trinity Ventures, rece ntly conducted, roughly 
thre ‘ quarte T s of executives liste d “improve d stor 1g 
management” as one of their top three priorities. On« 
CIO said that without the right sterage system, his 
company’s IT resources wouldn’t scale to mat« h the 
business’ expected 60% revenue growth for that year. 
Given the lack of alternatives from major 
vendors, this CIO said any system would 
provide a large enough incremental benefit 
to offset the risk of working with a start up 

For a $1 billion company with a 5% after 
tax profit margin, putting the storage frame 
work in place to allow for an additional 1% 
revenue growth would justify a $1 million ini- 
tial investment in a start- up product or service. 
DECIDE WHETHER TO BE FIRST. The next ques- 
tion is, “What is the cost of delaying the decision? 
Here, astute ClOs work as part of the senior strat- 
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egy team to determine different likely scenarios of 

market « hang¢ s and « ompe titive re sponses 
EVALUATE THE ASSETS. If you decick 
that the benefits of success are large and 


the cost of delay is great, you now want 


to focus on minimizing risks. At this pan 


ticular start-up, does senior manage 


ment have the expertise necessary to 


get the job done? Has the company 


attracted strong financial backing? Does 


it have other customers? Is it willing to craft a con 


tract that has the potential for early wins and early 


outs? If there are deve lopment delays, can vou stom 


ch the situation or find alternatives? 


If the start-up can’t pass this test, you may want 


to look elsewhere. If it can and you choose to do busi 


ness with it, be proactive about building a solid rela 


tionship 


\ 


\ key first step is to quickly identify a project 


I 
manager who has a vested interest in the project's suc 

cess. You should also be prepare d to dedicate internal 
resources to helping the start-up build the best prod 


tor your customers. You'll find that the stronger 


uct 
the relationship, the more influence you'll have in 
shaping the start-up’s long-term strategy, which in 


turn will lead to long-term benefits for you ROI 
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To increase your 
company’s Return on 
Information...We’re 


~~“ A 


a 


We're changing the way the world looks at information. 
Working with over 1500 companies worldwide, we understand the 
need to collect, organize and deliver vital information of all kinds. 
Taking complex information distributed across an entire enterprise 
giving management the comprehensive view it needs to make 
critical decisions that affect ROI — that’s our business. 
To get the best picture of your enterprise — and get the most out 
of your information assets — we're Ascential. 
Yesterday we were Informix Business Solutions. 


A 


Ascential 


Software 


Changing the way the world looks at information. 


www.ascentialsoftware.com 
800.966.9875 





BOTTOM LINE 


Se 


to Send Crackers Packing 


If blackmailers clip your data, show customers you're a step ahead sy ANN 


HEN INTRUDERS LAST YEAR GAINED ACCESS 


to 3.7 million credit card numbers in its 


customer database, Internet retailer 
Egghead.com Inc. took immediate steps against extor 
tion. The Menlo Park, Calif.-based company issued a 
press release to signal it wouldn’t be cowed into 
silence, reviewed its security procedures and called in 
law enforcement authorities 

Unlike a previous incident when a cracker stol« 
300,000 credit card numbers and tried to extort 
$100,000 from CD Universe Inc., an online retailer 


in Wallingford, Conn., Egghead said it didn’t receive 
blackmail threats. But the company’s swift and strate 
gic response to the security breach paid off with cus 


tomers, including Ryan Russell, IT manager at Secu 


rityFocus.com in San Mateo, Calif. “It’s not that big a 
deal,” he says. “If [Egghead] had been trying to cover 
it up so it would not lose market share, it would have 
been much worse. I, as a consumer, am much more 
willing to forgive an honest mistake than a « overup.” 

Russell, whose company runs the well-known 
BugTraq mailing list that, posts security bugs, says 
companies tempted to negotiate with blackmailers 
are usually most concerned about losing credibility 
and receiving negative publicity 

But negotiating is a bad idea for several reasons, 
he says. First, victims can’t trust the victimizers with 
whom the y are attempting to negotiate. Sec ond, com- 
panies can’t trust that an extortionist hasn't passed on 
stolen information. And finally, companies that have 


credit card data stolen are obliged to report the theft 


to the credit card companies, which in turn will can 
cel the cards and immediately notify users. 

Richard Stiennon, an analyst at Gartner Inc. in 
Stamford, Conn,, says extortion attempts would 
decline if companies refused to cooperate with would 
be blackmailers and instead seized the opportunity to 
spin the story their way. Microsoft Corp. did that last 
year when an intruder potentially accessed source 
code for its upcoming operating system releas« 
Microsoft first reported that a cracker had been inside 
its machines for months but later claimed that the 
intruder had never accessed the actual product cod 


able 


strate to customers and shareholders that not only did 


By spinning the story, “you're to demon 
you have good security before, but you can respond 
quickly and plug holes as they occur,” says Stiennon 

People who ferret out sec urity holes in com 
mercial software have also been accused of blackmail. 
But Russell says there’s a vast difference between 
blackmail and disclosure. Blackmail implies financial 
gain on the part of the blackmailer, he notes, but the 
only reward for publishing bugs is recognition. 

Russell says the harsh light of publicity used to be 
the only way to get many vendors to plug known 
security holes. But now, most software companies are 
more responsive to bug reports. And most bug hunters 
now give companies at least several weeks to fix a bug 
before they make flaws public. 

Says Russell, “It’s getting to the point where the 
recognition you get if you don’t give vendors enough 


notice is more negative than positive.” ROI 
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trust Verity 


to power their business portals. 


Verity 


Powering Business Portals 


T. 877.739.5207 | www.verity.com | VRTY 





balance sheet 
Little Guy Blows By 


internet 
More Stories Online: 


= There’s no better time than now to 
recast your e-business vision. 
= Watching your workers online? Here’s 


Industry Giants 


COMPARED WITH ITS MUCH larger com 
petitors in the $24.9 billion reinsurance 


industry, New York-based Holborn 


Corp. is a David among Goliaths. Its 


why you need a privacy and usage policy. 


eTeR OM AMA a eM cel elmo c 


high-tech slingshot is a year old, secure, 


TAKE-AWAYS 


interactive Web site that enables its client 
base of large insurance companies to 
electronically download customized 
underwriting information something 
most of Holborn’s competitors still 


don’t offer. 


preview 
Coming in the July/August Issue: 


Partners in Profit 


A cereal company teams with a toilet tissue maker to share truck space 


“As a reinsurer, we're the middle 
man, the broker,” says CIO Curt Asbury, 
“All we have to sell is our expertise and 
our service.” Asbury took a risk on hir 
ing a relatively new but by no means 
; inexperienced consulting company to 
and transportation costs — and saves millions of dollars a year. The 7 Topas Sea 
build and host the Web site, which paid 
U.S. Postal Service buddies up with rival FedEx to expand its delivery : ; 
: for itself in a little over six months. On 
footprint. Want to hold corporate hands? Learn the key role IT plays. ; 4 ae a 
an annual basis, Holborn figures it will 
save $150,000 or more in reduced costs 


Measure for Measure 


Not all companies count the same things. Some figure cost into technology RO! 


(see figures below) plus increase cus 
tomer satisfaction levels substantially. To 
calculations. Some don’t. Other metrics-obsessed companies, such as Lockheed get more details on the risks and rewards 
and Caterpillar, measure, remeasure and then audit everything, including their of being on the bleeding edge in a 
own metrics data. Find out what’s worth counting and what isn’t. stodgy, technology-adverse industry 

as well as interviews with Holborn exec- 


utives, visit wwww.computerworld.com /roi 


Whatever It Takes 


and click on Balance Sheet Notes. 
Eastman Chemical has outfitted its low-tech customers with PCs and 


7 ulia Kin 
Web access, invested millions in Internet technology start-ups and J g 


launched a Web-based logistics and ship- 
Me oui 


Ur eee er ail 2] 


ping company. The $5 billion company’s The Costs 
e-business czar talks about how these proj- Cotter Mee nas 
ects are now paying off big-time. $8,000 Graphics, artwork BSE Rr Me re) 

ATT Re MU ee eu kere) Cur) 

$2,500 Computer and BSE RTT Mee UR eur | 


Also Coming in the Next Issue... 


Why rack up huge capital costs when you can 


Datu aur el eid BSE MT MUR 


expense hardware and software costs? RO/ columnist MM UL ee ih 
Gus Tai looks at how. 


Tv 
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The Tonic web applications management enterprise 
solution has arrived. 


Suddenly the leading of e-business is a much more 
place to be. No matter how customers you 
attract. 


Tonic's ability to a web application problem before your 
customers do, the cause, and take automated corrective 
— guarantees a on-line 


You'll have of mind in knowing that your site is _avail- 
able and performing at peak. That the e-world far less 
. Even predictable. 


Up and in hours, not days. to use with immediate 


results. That's Tonic. And that's better. 
www.tonic.com 


TONIC 
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Licensing 


tened due to dominance in the 
marketplace,” said Scott New- 
ton, a senior technical archi- 
tect at cookie manufacturer 
Otis Spunkmeyer Inc. in San 
Leandro, Calif. “I just hope that 
I continue to see quality prod- 
uct releases in the future to 
make me feel like 1 am getting 
something for the money.” 
While industry analysts ex- 
pect the subscription model to 
catch on slowly, they also ex- 
pect customers to experience a 
from Micro- 
soft’s decision to eliminate its 


greater impact 
self-described “alphabet sour 
of upgrade programs in favor 
of a less-complicated Software 
Assurance plan 

“Microsoft will say that it’s 
simplifying, but I 
counter that they’ve confused 
simplification with elimina- 
tion of options,” said Alexa 


would 


Bona, an analyst at Stamford, 
Conn.-based Gartner Inc. Bona 
said Microsoft has discontin- 
ued the “cheap” option — the 
version-upgrade program her 
clients 
chart below). 

Under the Software Assur- 
ance program, users opting for 
the new upgrade path will pay 
25% of the license fee for any 
server package and 29% of a 
desktop product’s price each 


Upgrade Options 


commonly use (see 


year for the right to upgrade to 
the latest version of the soft- 
available while their 
agreements are in effect. They 
must already be using the cur- 
rent version of the software to 
qualify. 

Microsoft officials acknowl- 
edged that the change could 
result in higher prices for some 
companies, but they estimated 
that only about 20% of pur- 


ware 


chases would end up costing 
more than they do now be- 
customers up- 
less frequently than av- 

Microsoft 


cause those 
grade 
erage. 
manager Simon Hughes pre- 
dicted that “the vast majority 


program 


of customers will see the cost 
of license purchases stay the 
same or decrease Over time 

[wo analyst firms, however, 
predicted that the elimination 
of the popular version-upgrade 
programs could result in sub- 
stantial cost increases. Gartner 
said companies that perform 
upgrades once every four 
years could see costs soar 68% 
to 107% under the Software As- 
surance program. 

“There are some organiza 
tions who will find their costs 
reduced, but it’s not going to 
be, by any means, the majori- 
ty,” Bona predicted. 

A company with 5,000 desk- 
tops might pay 60% to 90% 
more for an upgrade of Mi- 
Office productivity 
software than it does today, 
Bona said. Instead of paying 


crosoft’s 


NEWS 


$900,000 for the upgrade, the 

might shell out 

$1.7 million, she estimated. 
Chris Le Tocq, an analyst at 


company 


Guernsey Research in Los Al- 
tos, Calif., said companies that 
perform Office upgrades every 
face price in- 
creases ranging from 22% to 
48%. If they upgrade 


every four years, the cost in- 


three years will 
now 


creases could be as much as 
40% to 70%, he said. 
that 


years 


Companies upgrade 


every two should see 
costs decrease 1% to 19%, but 
“in general, that’s not some- 
thing most organizations do,” 
Le Tocq said 

“More and 


tions are 


more organiza- 
[Microsoft 


they're going to upgrade less 


telling 
and less often,” he added. 
Come Oct. 1, customers will 
have four upgrade options: the 
purchase of a perpetual license, 
the Software 
gram, an Enterprise Agreement 


Assurance pro- 
or the new Enterprise Agree- 
ment Subscription model. 

“It looks like the 
mers] that will be hit hardest 
are the ones who have stayed 
back 
software and will now have to 
said Rob En- 


[custo- 


several 


become current,” 
derle, an analyst at Cambridge, 
Mass.-based Giga Information 
Group. 

So far, the subscription alter- 
native is drawing some mixed 
reaction. Jim Prevo, vice presi- 
dent and CIO at Waterbury, 


generations of 


What Analysts Are Saying 


“The majority of organizations 
that | speak to, | would be advis 
ing them to analyze the costs 
over the entire period the prod- 
ucts will be installed. And right 
now, it looks like the break-even 
point on an enterprise agreement 
subscription vs. the normai per- 
petual license is between five and 
six years.” 

- Alexa Bona, Gartner Inc. 

Stamford, Conn 


Vt.-based Green Mountain 
Coffee Inc., said it could be dif 
ficult for businesses that look 
at their software purchases as 


major capital expenditures. 
When economic times are dif- 
ficult, companies that put off 
capital il 


forced to ante up if their licens 


purchases will be 
es are about to expire, remov- 
ing flexibility, he said. 

Another drawback is that 
users would lose the existing 
option of skipping certain up- 
grades if they don’t want them, 
he said. Green Mountain chose 
not to upgrade to Office 97 be- 
cause of file compatibility is 
sues and other concerns, opt- 
ing instead to upgrade from Of- 
fice 95 to Office 2000, he said. 

But, Prevo added, “if the 
price is right, [subscription li- 
censing] wouldn’t be bad. I'd 
have to think about it.” 

Bona predicted that many 


Microsoft says its new upgrade program is simpler. Here’s a comparison of their current and future upgrade options. 


CURRENT 


> Version Upgrade Program: For customers 
upgrading from a prior version in the 
same product family. Example: Windows 
NT 4 to Windows 2000 Professional 


> Product Upgrade Program: For custo- 
mers upgrading from a prior version ina 
different product family. Example: Win- 
dows 98 to Windows 2000 Professional 
> Competitive Upgrade Program: For cus- 
tomers upgrading from a competing 
product. Example: OS2 to Windows 


> Language Upgrade Program: For custo- 
mers who need multilanguage versions. 
Example: Windows 2000 Professional 


> Upgrade Advantage: Gives customers with 


EFFECTIVE OCT. 1 

> Software Assurance: Entitles a 
customer to receive the latest 
version of a product while the 


“Microsoft licensing has always 
been incredibly confusing. Their 
stated purpose with these revi 
sions is to simplify the programs 
and make them more consistent in 
terms of pricing and licensing 
terms. From what | can tell, they 
have made progress. But it still 
would be a stretch to say they'l! be 
simple under the new programs.” 
- Dwight Davis 
Summit Strategies Inc., Boston 


companies won't bit 
initially. “It woul 
their subscrip 


doesn’t 
have the wherewithal to for 
the market into the 
tion 
‘The 
perpetual 
Davis said 
away from 


very gradual period of time.” D 
MOREONLINE 


www.computerworld.com/community/os 


> Enterprise Agreement 


> Enterprise Agreement 
Subscription 


eligible prior product version an upgrade 
to new version and access to all upgrades 
within contract time frame. Example: Of- 
fice 97 to Office 2000 and then Office XP 
> Enterprise Agreement: Gives customers 
all upgrades within contract time frame 
> Perpetual license: Gives rights to specific 
product version 


agreement is in effect; available 
to Open and Select license hold- 
ers who have the current soft- 
ware version. Annual cost is 25% 
of license fee for the server pack- 
age and 29% of a desktop prod- 
uct’s price. Users must declare 
intention to participate in the pro- 
gram when software is licensed. 


> Perpetual license/Windows 2000 
Professional license: Customer 
can purchase new perpetual li- 
cense for product. Because cus- 
tomer has full Windows license 
for PCs bought through OEMs, 
the customer can purchase up- 
grade license for the Windows 
desktop operating system. 


@) ase & 
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FRANKLY SPEAKING 


ke-up or Remove 


HE BUMPER STICKER READS, “Don’t laugh — it’s paid 
for.” The car it’s attached to isn’t the newest or nicest in 
the parking lot, but it’s good enough for somebody. And 
you can be pretty sure that it costs less to keep that 
clunker running for six months than one car payment. 
That’s Microsoft’s problem these days. Upgrades are down. Many 
customers have found a version of Windows or Office that’s good 
enough. It’s not the prettiest or most current, but that clunker does 
the job. There’s no compelling reason to upgrade, so they don’t. 
Microsoft’s solution: Compel them. 


Aw, that’s too strong. What Microsoft is really 
doing is offering to buy out the “perpetual li 
in many existing volume con 


cense” clause 


tracts (see story, Page One). Under current 
deals, once the agreement expires, the customer 
can keep using the software forever. Microsoft 
wants to change that clause so that when the 
contract expires, customers must either re-up 
or remove the software. 

Don Young, an analyst at UBS Warburg, says 
he has already turned up several Microsoft con- 
tracts with large European customers that have 
the “re-up or remove” clauses written into 
them. Under the new terms, customers must 
upgrade to the latest versions to 
renew their agreements. 

So what? Well, at companies that 
upgrade pretty much in lock step 
with Microsoft, it’s no big deal. 
They’re already running the latest 
and greatest. Or they’re six months 
behind the latest and greatest but 
still upgrading regularly 

But for companies that have 
found a good enough version of, 
say, Office and jumped off the up- 
grade treadmill — you know who 
you are — the new clause forces 
you right back on it. 

The irony is, it’s a mark of Mi- 
crosoft’s success that so many cus- 
tomers have stopped upgrading. 

Time was, upgrading desktop 
software wasn't a choice; it was < 
matter of survival. The features 
weren't there; the bugs were. 
Every new version edged a little 
closer to good enough, but it was 
never quite right. 

But Microsoft finally delivered 
the goods — or good enough, any- 


Microsoft’s 
new terms 
will eliminate 
the choice not 
to upgrade. 


way. Today, there’s plenty of copies of outdated 
Windows and Office out there just chugging 
along. At long last, they’re mature, stable and 
working fine. 

And like that eyesore in the parking lot, this 
old software is a known quantity. Its bugs and 
quirks are familiar to both IT and users. You 
know how to work around problems and 
squeeze out the capabilities you need. Besides, 
it’s paid for. Why upgrade? 

That's a question only Microsoft can answer. 
Chose new terms will effectively eliminate the 
choice not to upgrade. That means Microsoft's 
answer had better be pretty impressive. 

So when Microsoft comes call- 
ing to buy out your perpetual li- 
cense clause, do the math. Calcu- 
late the real cost of all those extra 
upgrades you'll be forced to do - 
including the labor, the learning 
curve, the applications that break 
and the hardware that turns out 
to be inadequate. 

Figure in what the lost flexibili- 
ty will mean at budget time — 
you'll no longer have the flexibili- 
ty to put off upgrades when times 
get tight. It’s one more chunk of 
your budget that’s out of your 
control. 

Then listen to how much Mi- 
crosoft offers to make those extra 
costs and loss of budget control 
worth your while. Hey, don’t 
laugh — maybe they'll pay for it. 

But don’t count on it. D 


Hayes, Computerworld’s senior 
news columnist, has covered IT for 
more than 20 years. Contact him at 


frank_hayes@computerworld.com. 


WHEELER-DEALER at Fortune 


very-smali-number company 

spends hours on the phone with 
the help desk, tryir 
his laptop to the network. Re 


nstalls, reboots dozens of times 


0 connect 


attempts to ping servers all over 
the network - nothing helps 
Non-IT pilot fish walks in on exec 
and points out that the PC Card 
network dongle isn't plugged in 


He plugs it in; the connection 


works. “Help desk never asked if 


f 


the machine was a laptop,” fish 


WANNABE POWER USER 
with a yen tor the latest and 
jreatest orders the newe 
sion of his PC operating system 
and submits a requisition for in 
tallation. Weary (and wary) IT 
pilot fish e-mails user, asking 
“Are all your software tools on 
your PC certified and teste 
non the new OS version?” 
Replies user blithely, “How 
should | know? I'm not ever 


what's installed on my PC.” 


HIGH-POWERED MARKET- 
ING MANAGER hears that net 


working pilot fish is installing a 
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— 
tile-share server to support a 
Jozen company divisions. That 
not right, manager objects. “An 
internet-locused company like 
ours shouldnt put files on a 

server,” she says. “They really 


should be on the intranet 


BIGWIG SALES EXEC at digi 
tal videoconferencing vendor is 
interviewing pilot fish for a job. 
touting how the company is try 
ng to break into the commercial 
market. Have you pitched cable 
systems operators? fish asks 
“Why would | do that?” baffled 
bigwig replies. “What would | do 
with all that bandwidth?” 


After last Wednesday's Daily 
Shark item (you can see it at 
omputerworld.com/sharky) 
yne IT director pilot fish had to 
respond. “When | first got here 
had the team rename the serv- 
ers,” he says. “The server for 
the GI Lab system was called 
Uranus. | thought that was 
inprofessional.” Tell me about 
your profession: sharky@ 
computerworld.com. You 
jet a sharp Shark shirt if your 
true tale of IT life sees print 
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place, Doug. Try 


1 again 


Rich Tennant, www.theSthwave.com 
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